# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Mar  3 2020 14:14:30
# Log Creation Date: 12.03.2020 03:05:08.106

Process:
	id = "1"
	image_name = "file2.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\file2.exe"
	page_root = "0xec6b000"
	os_pid = "0xe78"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x560"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\file2.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x1140

	[0039.323] _alloca_probe () returned 0x4052ea
	[0039.440] RtlCreateHeap (Flags=0x0, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x0, Lock=0x0, Parameters=0x0) returned 0x8c0000
	[0039.441] GetProcessHeap () returned 0x620000
	[0039.441] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x9, Size=0x104) returned 0x62f1e0
	[0039.441] GetProcessHeap () returned 0x620000
	[0039.441] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x9, Size=0x104) returned 0x62e0d8
	[0039.441] mbstowcs (in: _Dest=0x62f1e0, _Source="CoronaVirus", _MaxCount=0x1000 | out: _Dest="CoronaVirus") returned 0xb
	[0039.441] GetCurrentProcess () returned 0xffffffff
	[0039.441] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x19ff64, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x19ff64, ReturnLength=0x0) returned 0x0
	[0039.443] RtlGetCurrentPeb () returned 0x2f1000
	[0039.443] CsrGetProcessId () returned 0x1e4
	[0039.443] NtOpenProcess (in: ProcessHandle=0x19ff5c, DesiredAccess=0x1f0fff, ObjectAttributes=0x0, ClientId=0x19ff54*(UniqueProcess=0x1e4, UniqueThread=0x0) | out: ProcessHandle=0x19ff5c*=0x0) returned 0xc0000005
	[0039.443] LoadLibraryA (lpLibFileName="user32") returned 0x750c0000
	[0041.954] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000
	[0048.931] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x754f0000
	[0049.160] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x742c0000
	[0049.285] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0049.285] LoadLibraryA (lpLibFileName="msvcrt") returned 0x77640000
	[0049.286] GetProcAddress (hModule=0x77640000, lpProcName="free") returned 0x77687070
	[0049.286] GetProcAddress (hModule=0x772d0000, lpProcName="VirtualAllocEx") returned 0x772e6990
	[0049.286] GetProcAddress (hModule=0x772d0000, lpProcName="WriteProcessMemory") returned 0x772e6b70
	[0049.286] GetProcAddress (hModule=0x772d0000, lpProcName="QueueUserAPC") returned 0x772e5de0
	[0049.286] GetProcAddress (hModule=0x772d0000, lpProcName="ResumeThread") returned 0x772e6380
	[0049.286] GetProcAddress (hModule=0x750c0000, lpProcName="GetShellWindow") returned 0x750f1150
	[0049.287] GetProcAddress (hModule=0x750c0000, lpProcName="SetForegroundWindow") returned 0x750e2900
	[0049.287] GetProcAddress (hModule=0x750c0000, lpProcName="MessageBoxA") returned 0x7512d740
	[0049.287] GetProcAddress (hModule=0x750c0000, lpProcName="GetActiveWindow") returned 0x750e05d0
	[0049.287] GetProcAddress (hModule=0x754f0000, lpProcName="WSAStartup") returned 0x754f5b40
	[0049.287] GetProcAddress (hModule=0x754f0000, lpProcName="connect") returned 0x754f5410
	[0049.287] GetProcAddress (hModule=0x754f0000, lpProcName="socket") returned 0x75504510
	[0049.287] GetProcAddress (hModule=0x754f0000, lpProcName="gethostbyname") returned 0x75526cb0
	[0049.288] GetProcAddress (hModule=0x754f0000, lpProcName="send") returned 0x754f5030
	[0049.288] GetProcAddress (hModule=0x754f0000, lpProcName="closesocket") returned 0x75500910
	[0049.288] GetProcAddress (hModule=0x754f0000, lpProcName="htons") returned 0x75508ff0
	[0049.288] GetProcAddress (hModule=0x742c0000, lpProcName="WNetEnumResourceW") returned 0x742c2410
	[0049.288] GetProcAddress (hModule=0x742c0000, lpProcName="WNetOpenEnumW") returned 0x742c2790
	[0049.288] GetProcAddress (hModule=0x742c0000, lpProcName="WNetCloseEnum") returned 0x742c2640
	[0049.288] GetProcAddress (hModule=0x75760000, lpProcName="ShellExecuteExW") returned 0x758c4730
	[0049.288] GetProcAddress (hModule=0x75760000, lpProcName="CommandLineToArgvW") returned 0x758bcc20
	[0049.288] mbstowcs (in: _Dest=0x62f1e0, _Source="open", _MaxCount=0x1000 | out: _Dest="open") returned 0x4
	[0049.289] mbstowcs (in: _Dest=0x62f1e0, _Source="runas", _MaxCount=0x1000 | out: _Dest="runas") returned 0x5
	[0049.289] LoadLibraryA (lpLibFileName="wInINeT.dll") returned 0x73ff0000
	[0049.604] GetProcAddress (hModule=0x73ff0000, lpProcName="InternetOpenA") returned 0x7410f1a0
	[0049.604] GetProcAddress (hModule=0x73ff0000, lpProcName="InternetConnectA") returned 0x741ee5b0
	[0049.604] GetProcAddress (hModule=0x73ff0000, lpProcName="FtpPutFileW") returned 0x741ffce0
	[0049.604] GetProcAddress (hModule=0x73ff0000, lpProcName="InternetCloseHandle") returned 0x740fd000
	[0049.604] GetProcAddress (hModule=0x73ff0000, lpProcName="FtpCreateDirectoryA") returned 0x741fc230
	[0049.604] GetProcAddress (hModule=0x73ff0000, lpProcName="FtpSetCurrentDirectoryA") returned 0x741fcdc0
	[0049.604] mbstowcs (in: _Dest=0x62f1e0, _Source="/upload", _MaxCount=0x1000 | out: _Dest="/upload") returned 0x7
	[0049.604] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExW") returned 0x756ff530
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="RegCloseKey") returned 0x756fed60
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="GetCurrentHwProfileW") returned 0x756f2620
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x75702180
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="RegOpenKeyExA") returned 0x756ff210
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="RegCreateKeyExA") returned 0x756ff560
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExW") returned 0x756fe5a0
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExA") returned 0x756ff020
	[0049.605] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExA") returned 0x756fffc0
	[0049.605] GetProcAddress (hModule=0x77640000, lpProcName="malloc") returned 0x77687230
	[0049.605] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\file2.exe\" "
	[0049.606] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\FD1HVy\\Desktop\\file2.exe\" ", pNumArgs=0x19ff60 | out: pNumArgs=0x19ff60) returned 0x637ea0*="C:\\Users\\FD1HVy\\Desktop\\file2.exe"
	[0049.606] GetCurrentHwProfileW (in: lpHwProfileInfo=0x415ce0 | out: lpHwProfileInfo=0x415ce0) returned 1
	[0049.607] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive0") returned 18
	[0049.607] CreateFileA (lpFileName="\\\\.\\PhysicalDrive0" (normalized: "\\device\\harddisk0\\dr0"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0049.607] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x192db8, nOutBufferSize=0x8, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x192db8*, lpBytesReturned=0x192dc0*=0x8, lpOverlapped=0x0) returned 1
	[0049.607] RtlAllocateHeap (HeapHandle=0x8c0000, Flags=0x8, Size=0x18c) returned 0x8c04a0
	[0049.607] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x8c04a0, nOutBufferSize=0x18c, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x8c04a0*, lpBytesReturned=0x192dc0*=0x18c, lpOverlapped=0x0) returned 1
	[0049.608] RtlAllocateHeap (HeapHandle=0x8c0000, Flags=0x8, Size=0x400) returned 0x8c0638
	[0049.608] HeapFree (in: hHeap=0x8c0000, dwFlags=0x0, lpMem=0x8c04a0 | out: hHeap=0x8c0000) returned 1
	[0049.608] CloseHandle (hObject=0x1fc) returned 1
	[0049.608] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive1") returned 18
	[0049.613] CreateFileA (lpFileName="\\\\.\\PhysicalDrive1" (normalized: "physicaldrive1"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0049.613] GetLastError () returned 0x2
	[0049.613] wcstombs (in: _Dest=0x19fef8, _Source="{fae9929d-933c-11e7-a51d-806e6f6e6963}", _MaxCount=0x4e | out: _Dest="{fae9929d-933c-11e7-a51d-806e6f6e6963}") returned 0x26
	[0049.613] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0049.613] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0049.614] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0049.614] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0049.614] MD5Init () returned 0x192d48
	[0049.614] MD5Update () returned 0x192d60
	[0049.614] MD5Final () returned 0x0
	[0049.614] mbstowcs (in: _Dest=0x415f88, _Source="0E49A740B97D599F65DA582ACEC4991B", _MaxCount=0x9c | out: _Dest="0E49A740B97D599F65DA582ACEC4991B") returned 0x20
	[0049.614] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\Desktop\\file2.exe", lpszShortPath=0x413ce0, cchBuffer=0x2000 | out: lpszShortPath="C:\\Users\\FD1HVy\\Desktop\\file2.exe") returned 0x21
	[0049.614] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x40ad40 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23
	[0049.614] LoadLibraryA (lpLibFileName="setupapi") returned 0x744f0000
	[0049.935] GetProcAddress (hModule=0x744f0000, lpProcName="IsUserAdmin") returned 0x74595ba0
	[0049.938] IsUserAdmin () returned 0x1
	[0049.938] RtlGetNtVersionNumbers () returned 0xf0003ad7
	[0049.938] GetProcAddress (hModule=0x772d0000, lpProcName="IsWow64Process") returned 0x772e5a20
	[0049.938] GetCurrentProcess () returned 0xffffffff
	[0049.938] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x41837c | out: Wow64Process=0x41837c) returned 1
	[0049.938] GetComputerNameA (in: lpBuffer=0x418381, nSize=0x192dc4 | out: lpBuffer="NQDPDE", nSize=0x192dc4) returned 1
	[0049.939] GetUserNameA (in: lpBuffer=0x4183c1, pcbBuffer=0x192dc4 | out: lpBuffer="FD1HVy", pcbBuffer=0x192dc4) returned 1
	[0049.956] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x418409, nSize=0x1000 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0x21
	[0049.956] GetSystemDefaultLCID () returned 0x409
	[0049.956] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 8
	[0049.958] RtlAllocateHeap (HeapHandle=0x8c0000, Flags=0x8, Size=0x9) returned 0x8c04a0
	[0049.958] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x8c04a0, cchData=8 | out: lpLCData="English") returned 8
	[0049.958] _strcmpi (_Str1="English", _Str2="Russian") returned -1
	[0049.958] GetModuleHandleA (lpModuleName="sbiedll.dll") returned 0x0
	[0049.958] RtlAllocateHeap (HeapHandle=0x8c0000, Flags=0x9, Size=0x4e20) returned 0x8c0a40
	[0049.959] GetProcAddress (hModule=0x77970000, lpProcName="RtlDecompressBuffer") returned 0x779e1bc0
	[0049.959] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8c0a40, UncompressedBufferSize=0x323, CompressedBuffer=0x40a3da, CompressedBufferSize=0x25a, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x8c0a40, FinalUncompressedSize=0x192d5c) returned 0x0
	[0049.959] RtlAllocateHeap (HeapHandle=0x8c0000, Flags=0x9, Size=0x85c) returned 0x8c5868
	[0049.959] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8c5868, UncompressedBufferSize=0x42e, CompressedBuffer=0x40a634, CompressedBufferSize=0x3d4, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x8c5868, FinalUncompressedSize=0x192d5c) returned 0x0
	[0049.959] RtlAllocateHeap (HeapHandle=0x8c0000, Flags=0x9, Size=0x36) returned 0x8c04b8
	[0049.959] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8c04b8, UncompressedBufferSize=0x1b, CompressedBuffer=0x40aa08, CompressedBufferSize=0x21, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x8c04b8, FinalUncompressedSize=0x192d5c) returned 0x0
	[0049.959] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_ARCHITECTURE%", lpDst=0x192578, nSize=0x104 | out: lpDst="x86") returned 0x4
	[0049.959] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_IDENTIFIER%", lpDst=0x192988, nSize=0x104 | out: lpDst="Intel64 Family 6 Model 85 Stepping 4, GenuineIntel") returned 0x33
	[0049.959] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_LEVEL%", lpDst=0x192b90, nSize=0x104 | out: lpDst="6") returned 0x2
	[0049.959] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_REVISION%", lpDst=0x192780, nSize=0x104 | out: lpDst="5504") returned 0x5
	[0049.959] sprintf (in: _Dest=0x192d98, _Format="%s%s%s%s" | out: _Dest="xI65") returned 4
	[0049.959] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0049.959] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0049.959] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0049.959] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0049.959] MD5Init () returned 0x1924f8
	[0049.959] MD5Update () returned 0x192510
	[0049.960] MD5Final () returned 0x0
	[0049.960] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="ADB30A2AD9591DD667796100DD07A7A7", ulOptions=0x0, samDesired=0x1, phkResult=0x192dc4 | out: phkResult=0x192dc4*=0x0) returned 0x2
	[0049.960] RegCreateKeyExA (in: hKey=0x80000001, lpSubKey="ADB30A2AD9591DD667796100DD07A7A7", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x192dc4, lpdwDisposition=0x0 | out: phkResult=0x192dc4*=0x22c, lpdwDisposition=0x0) returned 0x0
	[0049.960] HeapFree (in: hHeap=0x8c0000, dwFlags=0x1, lpMem=0x8c04b8 | out: hHeap=0x8c0000) returned 0
	[0049.960] HeapFree (in: hHeap=0x8c0000, dwFlags=0x1, lpMem=0x8c5868 | out: hHeap=0x8c0000) returned 1
	[0049.960] RtlAllocateHeap (HeapHandle=0x8c0000, Flags=0x9, Size=0x4e20) returned 0x8c5868
	[0049.961] sprintf (in: _Dest=0x8c5868, _Format="                         CORONAVIRUS is there\r\n                      All your file are crypted. \r\n         Your computer is temporarily blocked on several levels.\r\n          Applying strong military secret encryption algorithm.\r\n\r\nTo assist in decrypting your files, you must do the following:\r\n1. Pay %s btc to Bitcoin wallet %s  \r\nor purchase the receipt Bitcoin;\r\n2. Contact us by e-mail: %s and tell us this your \r\nunique ID: %s\r\nand send the link to Bitcoin transaction generated or Bitcoin check number.\r\nAfter all this, you get in your email the following:\r\n1. Instructions and software to unlock your computer\r\n2. Program - decryptor of your files.\r\nDonations to the US presidential elections are accepted around the clock.\r\nDesine sperare qui hic intras! [Wait to payment timeout 25 - 40 min]\r\n" | out: _Dest="                         CORONAVIRUS is there\r\n                      All your file are crypted. \r\n         Your computer is temporarily blocked on several levels.\r\n          Applying strong military secret encryption algorithm.\r\n\r\nTo assist in decrypting your files, you must do the following:\r\n1. Pay 0.008 btc to Bitcoin wallet bc1qzww0kjteu52w50m3d2ucp72zh5dwchph9vqj6k  \r\nor purchase the receipt Bitcoin;\r\n2. Contact us by e-mail: coronaVi2022@protonmail.ch and tell us this your \r\nunique ID: 0E49A740B97D599F65DA582ACEC4991B\r\nand send the link to Bitcoin transaction generated or Bitcoin check number.\r\nAfter all this, you get in your email the following:\r\n1. Instructions and software to unlock your computer\r\n2. Program - decryptor of your files.\r\nDonations to the US presidential elections are accepted around the clock.\r\nDesine sperare qui hic intras! [Wait to payment timeout 25 - 40 min]\r\n") returned 900
	[0049.961] HeapFree (in: hHeap=0x8c0000, dwFlags=0x1, lpMem=0x8c0a40 | out: hHeap=0x8c0000) returned 1
	[0049.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230
	[0049.964] WriteFile (in: hFile=0x230, lpBuffer=0x8c5868*, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0x192564, lpOverlapped=0x0 | out: lpBuffer=0x8c5868*, lpNumberOfBytesWritten=0x192564*=0x384, lpOverlapped=0x0) returned 1
	[0050.022] FlushFileBuffers (hFile=0x230) returned 1
	[0050.025] CloseHandle (hObject=0x230) returned 1
	[0050.027] RegSetValueExA (in: hKey=0x22c, lpValueName="E-mail", Reserved=0x0, dwType=0x1, lpData="coronaVi2022@protonmail.ch", cbData=0x30 | out: lpData="coronaVi2022@protonmail.ch") returned 0x0
	[0050.027] RegSetValueExA (in: hKey=0x22c, lpValueName="BTC", Reserved=0x0, dwType=0x1, lpData="bc1qzww0kjteu52w50m3d2ucp72zh5dwchph9vqj6k", cbData=0x30 | out: lpData="bc1qzww0kjteu52w50m3d2ucp72zh5dwchph9vqj6k") returned 0x0
	[0050.027] RegCloseKey (hKey=0x22c) returned 0x0
	[0050.027] RegCreateKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x19256c, lpdwDisposition=0x0 | out: phkResult=0x19256c*=0x22c, lpdwDisposition=0x0) returned 0x0
	[0050.027] GetProcessHeap () returned 0x620000
	[0050.027] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x634540
	[0050.027] RegSetValueExW (in: hKey=0x22c, lpValueName="mznm", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt", cbData=0x64 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt") returned 0x0
	[0050.028] RegCloseKey (hKey=0x22c) returned 0x0
	[0050.028] GetProcessHeap () returned 0x620000
	[0050.028] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x6346e0
	[0050.029] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\kvr.exe"), bFailIfExists=0) returned 1
	[0050.299] _swprintf (in: param_1=0x194de8, param_2=" %s \"%s\"" | out: param_1=" {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\Desktop\\file2.exe\"") returned 75
	[0050.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x405bf0, lpParameter=0x192ddc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c
	[0050.300] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0056.225] ExitProcess (uExitCode=0x0) 

Thread:
	id = 2
	os_tid = 0x1164


Thread:
	id = 3
	os_tid = 0x1184

	[0050.340] _alloca_probe () returned 0x405bfd
	[0050.343] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\kvr.exe")) returned 0x20
	[0050.345] GetShellWindow () returned 0x100f0
	[0050.349] ShellExecuteExW (in: pExecInfo=0x216ff44*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe", lpParameters=" {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\Desktop\\file2.exe\"", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x216ff44*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe", lpParameters=" {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\Desktop\\file2.exe\"", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1

Thread:
	id = 4
	os_tid = 0x1188


Thread:
	id = 5
	os_tid = 0x11b4


Thread:
	id = 6
	os_tid = 0x11a0


Thread:
	id = 7
	os_tid = 0x1020


Thread:
	id = 8
	os_tid = 0x1024


Thread:
	id = 9
	os_tid = 0xe8c


Thread:
	id = 10
	os_tid = 0xd48


Process:
	id = "2"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x4c27d000"
	os_pid = "0x5b0"
	os_integrity_level = "0x4000"
	os_privileges = "0x260814080"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x23c"
	cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000f8bc" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 11
	os_tid = 0x1180


Thread:
	id = 12
	os_tid = 0x9bc


Thread:
	id = 13
	os_tid = 0x7ec


Thread:
	id = 14
	os_tid = 0x770


Thread:
	id = 15
	os_tid = 0x7d8


Thread:
	id = 16
	os_tid = 0x698


Thread:
	id = 17
	os_tid = 0x690


Thread:
	id = 18
	os_tid = 0x5fc


Thread:
	id = 19
	os_tid = 0x5f8


Thread:
	id = 20
	os_tid = 0x5f4


Thread:
	id = 21
	os_tid = 0x5b4


Process:
	id = "3"
	image_name = "kvr.exe"
	filename = "c:\\users\\fd1hvy\\appdata\\local\\temp\\kvr.exe"
	page_root = "0x996f000"
	os_pid = "0xde0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xe78"
	cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe\"  {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\Desktop\\file2.exe\""
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 22
	os_tid = 0x2c0

	[0056.250] _alloca_probe () returned 0x4052ea
	[0056.261] RtlCreateHeap (Flags=0x0, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x0, Lock=0x0, Parameters=0x0) returned 0x870000
	[0056.262] GetProcessHeap () returned 0x5f0000
	[0056.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x9, Size=0x104) returned 0x5ff360
	[0056.262] GetProcessHeap () returned 0x5f0000
	[0056.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x9, Size=0x104) returned 0x5fe258
	[0056.263] mbstowcs (in: _Dest=0x5ff360, _Source="CoronaVirus", _MaxCount=0x1000 | out: _Dest="CoronaVirus") returned 0xb
	[0056.263] GetCurrentProcess () returned 0xffffffff
	[0056.263] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x19ff64, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x19ff64, ReturnLength=0x0) returned 0x0
	[0056.263] RtlGetCurrentPeb () returned 0x342000
	[0056.263] CsrGetProcessId () returned 0x1e4
	[0056.263] NtOpenProcess (in: ProcessHandle=0x19ff5c, DesiredAccess=0x1f0fff, ObjectAttributes=0x0, ClientId=0x19ff54*(UniqueProcess=0x1e4, UniqueThread=0x0) | out: ProcessHandle=0x19ff5c*=0x0) returned 0xc0000005
	[0056.263] LoadLibraryA (lpLibFileName="user32") returned 0x750c0000
	[0056.306] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000
	[0056.372] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x754f0000
	[0056.374] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x742c0000
	[0056.377] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0056.377] LoadLibraryA (lpLibFileName="msvcrt") returned 0x77640000
	[0056.377] GetProcAddress (hModule=0x77640000, lpProcName="free") returned 0x77687070
	[0056.377] GetProcAddress (hModule=0x772d0000, lpProcName="VirtualAllocEx") returned 0x772e6990
	[0056.377] GetProcAddress (hModule=0x772d0000, lpProcName="WriteProcessMemory") returned 0x772e6b70
	[0056.377] GetProcAddress (hModule=0x772d0000, lpProcName="QueueUserAPC") returned 0x772e5de0
	[0056.378] GetProcAddress (hModule=0x772d0000, lpProcName="ResumeThread") returned 0x772e6380
	[0056.378] GetProcAddress (hModule=0x750c0000, lpProcName="GetShellWindow") returned 0x750f1150
	[0056.378] GetProcAddress (hModule=0x750c0000, lpProcName="SetForegroundWindow") returned 0x750e2900
	[0056.378] GetProcAddress (hModule=0x750c0000, lpProcName="MessageBoxA") returned 0x7512d740
	[0056.378] GetProcAddress (hModule=0x750c0000, lpProcName="GetActiveWindow") returned 0x750e05d0
	[0056.378] GetProcAddress (hModule=0x754f0000, lpProcName="WSAStartup") returned 0x754f5b40
	[0056.378] GetProcAddress (hModule=0x754f0000, lpProcName="connect") returned 0x754f5410
	[0056.379] GetProcAddress (hModule=0x754f0000, lpProcName="socket") returned 0x75504510
	[0056.379] GetProcAddress (hModule=0x754f0000, lpProcName="gethostbyname") returned 0x75526cb0
	[0056.379] GetProcAddress (hModule=0x754f0000, lpProcName="send") returned 0x754f5030
	[0056.379] GetProcAddress (hModule=0x754f0000, lpProcName="closesocket") returned 0x75500910
	[0056.379] GetProcAddress (hModule=0x754f0000, lpProcName="htons") returned 0x75508ff0
	[0056.379] GetProcAddress (hModule=0x742c0000, lpProcName="WNetEnumResourceW") returned 0x742c2410
	[0056.379] GetProcAddress (hModule=0x742c0000, lpProcName="WNetOpenEnumW") returned 0x742c2790
	[0056.379] GetProcAddress (hModule=0x742c0000, lpProcName="WNetCloseEnum") returned 0x742c2640
	[0056.379] GetProcAddress (hModule=0x75760000, lpProcName="ShellExecuteExW") returned 0x758c4730
	[0056.379] GetProcAddress (hModule=0x75760000, lpProcName="CommandLineToArgvW") returned 0x758bcc20
	[0056.380] mbstowcs (in: _Dest=0x5ff360, _Source="open", _MaxCount=0x1000 | out: _Dest="open") returned 0x4
	[0056.380] mbstowcs (in: _Dest=0x5ff360, _Source="runas", _MaxCount=0x1000 | out: _Dest="runas") returned 0x5
	[0056.380] LoadLibraryA (lpLibFileName="wInINeT.dll") returned 0x73ff0000
	[0056.383] GetProcAddress (hModule=0x73ff0000, lpProcName="InternetOpenA") returned 0x7410f1a0
	[0056.383] GetProcAddress (hModule=0x73ff0000, lpProcName="InternetConnectA") returned 0x741ee5b0
	[0056.384] GetProcAddress (hModule=0x73ff0000, lpProcName="FtpPutFileW") returned 0x741ffce0
	[0056.384] GetProcAddress (hModule=0x73ff0000, lpProcName="InternetCloseHandle") returned 0x740fd000
	[0056.384] GetProcAddress (hModule=0x73ff0000, lpProcName="FtpCreateDirectoryA") returned 0x741fc230
	[0056.384] GetProcAddress (hModule=0x73ff0000, lpProcName="FtpSetCurrentDirectoryA") returned 0x741fcdc0
	[0056.384] mbstowcs (in: _Dest=0x5ff360, _Source="/upload", _MaxCount=0x1000 | out: _Dest="/upload") returned 0x7
	[0056.384] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExW") returned 0x756ff530
	[0056.384] GetProcAddress (hModule=0x756e0000, lpProcName="RegCloseKey") returned 0x756fed60
	[0056.384] GetProcAddress (hModule=0x756e0000, lpProcName="GetCurrentHwProfileW") returned 0x756f2620
	[0056.384] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x75702180
	[0056.384] GetProcAddress (hModule=0x756e0000, lpProcName="RegOpenKeyExA") returned 0x756ff210
	[0056.385] GetProcAddress (hModule=0x756e0000, lpProcName="RegCreateKeyExA") returned 0x756ff560
	[0056.385] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExW") returned 0x756fe5a0
	[0056.385] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExA") returned 0x756ff020
	[0056.385] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExA") returned 0x756fffc0
	[0056.385] GetProcAddress (hModule=0x77640000, lpProcName="malloc") returned 0x77687230
	[0056.385] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe\"  {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\Desktop\\file2.exe\""
	[0056.385] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe\"  {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\Desktop\\file2.exe\"", pNumArgs=0x19ff60 | out: pNumArgs=0x19ff60) returned 0x606250*="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe"
	[0056.385] GetCurrentHwProfileW (in: lpHwProfileInfo=0x415ce0 | out: lpHwProfileInfo=0x415ce0) returned 1
	[0056.386] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive0") returned 18
	[0056.386] CreateFileA (lpFileName="\\\\.\\PhysicalDrive0" (normalized: "\\device\\harddisk0\\dr0"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0056.386] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x192db8, nOutBufferSize=0x8, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x192db8*, lpBytesReturned=0x192dc0*=0x8, lpOverlapped=0x0) returned 1
	[0056.386] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x18c) returned 0x8704a0
	[0056.386] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x8704a0, nOutBufferSize=0x18c, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x8704a0*, lpBytesReturned=0x192dc0*=0x18c, lpOverlapped=0x0) returned 1
	[0056.386] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x400) returned 0x870638
	[0056.386] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8704a0 | out: hHeap=0x870000) returned 1
	[0056.386] CloseHandle (hObject=0x1fc) returned 1
	[0056.386] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive1") returned 18
	[0056.391] CreateFileA (lpFileName="\\\\.\\PhysicalDrive1" (normalized: "physicaldrive1"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0056.391] GetLastError () returned 0x2
	[0056.391] wcstombs (in: _Dest=0x19fef8, _Source="{fae9929d-933c-11e7-a51d-806e6f6e6963}", _MaxCount=0x4e | out: _Dest="{fae9929d-933c-11e7-a51d-806e6f6e6963}") returned 0x26
	[0056.391] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0056.391] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0056.391] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0056.391] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0056.391] MD5Init () returned 0x192d48
	[0056.391] MD5Update () returned 0x192d60
	[0056.391] MD5Final () returned 0x0
	[0056.391] mbstowcs (in: _Dest=0x415f88, _Source="0E49A740B97D599F65DA582ACEC4991B", _MaxCount=0x9c | out: _Dest="0E49A740B97D599F65DA582ACEC4991B") returned 0x20
	[0056.391] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe", lpszShortPath=0x413ce0, cchBuffer=0x2000 | out: lpszShortPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe") returned 0x2a
	[0056.392] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x40ad40 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23
	[0056.392] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0056.392] Sleep (dwMilliseconds=0x64) 
	[0056.533] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0056.533] Sleep (dwMilliseconds=0x64) 
	[0056.653] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0056.654] Sleep (dwMilliseconds=0x64) 
	[0056.788] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0056.789] Sleep (dwMilliseconds=0x64) 
	[0057.027] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.027] Sleep (dwMilliseconds=0x64) 
	[0057.156] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.157] Sleep (dwMilliseconds=0x64) 
	[0057.275] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.275] Sleep (dwMilliseconds=0x64) 
	[0057.385] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.386] Sleep (dwMilliseconds=0x64) 
	[0057.607] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.607] Sleep (dwMilliseconds=0x64) 
	[0057.750] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.750] Sleep (dwMilliseconds=0x64) 
	[0057.862] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.863] Sleep (dwMilliseconds=0x64) 
	[0057.988] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0057.988] Sleep (dwMilliseconds=0x64) 
	[0058.163] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0058.164] Sleep (dwMilliseconds=0x64) 
	[0058.301] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0058.302] Sleep (dwMilliseconds=0x64) 
	[0058.409] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0058.409] Sleep (dwMilliseconds=0x64) 
	[0058.567] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0058.568] Sleep (dwMilliseconds=0x64) 
	[0058.676] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0058.676] Sleep (dwMilliseconds=0x64) 
	[0058.815] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0058.816] Sleep (dwMilliseconds=0x64) 
	[0058.972] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0058.972] Sleep (dwMilliseconds=0x64) 
	[0059.148] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0059.148] Sleep (dwMilliseconds=0x64) 
	[0059.317] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0059.327] Sleep (dwMilliseconds=0x64) 
	[0059.492] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0059.492] Sleep (dwMilliseconds=0x64) 
	[0059.629] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0059.629] Sleep (dwMilliseconds=0x64) 
	[0059.769] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0059.769] Sleep (dwMilliseconds=0x64) 
	[0059.925] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0059.926] Sleep (dwMilliseconds=0x64) 
	[0060.067] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0060.067] Sleep (dwMilliseconds=0x64) 
	[0060.187] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0060.187] Sleep (dwMilliseconds=0x64) 
	[0060.316] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0060.316] Sleep (dwMilliseconds=0x64) 
	[0060.615] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0060.615] Sleep (dwMilliseconds=0x64) 
	[0060.753] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0060.754] Sleep (dwMilliseconds=0x64) 
	[0060.866] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0060.866] Sleep (dwMilliseconds=0x64) 
	[0061.005] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0061.005] Sleep (dwMilliseconds=0x64) 
	[0061.145] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0061.145] Sleep (dwMilliseconds=0x64) 
	[0061.269] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0061.269] Sleep (dwMilliseconds=0x64) 
	[0061.410] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0061.410] Sleep (dwMilliseconds=0x64) 
	[0061.566] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 0
	[0061.566] Sleep (dwMilliseconds=0x64) 
	[0061.816] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\file2.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\file2.exe")) returned 1
	[0061.817] RtlGetNtVersionNumbers () returned 0xf0003ad7
	[0061.817] GetProcAddress (hModule=0x772d0000, lpProcName="IsWow64Process") returned 0x772e5a20
	[0061.817] GetCurrentProcess () returned 0xffffffff
	[0061.817] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x41837c | out: Wow64Process=0x41837c) returned 1
	[0061.817] GetComputerNameA (in: lpBuffer=0x418381, nSize=0x192dc4 | out: lpBuffer="NQDPDE", nSize=0x192dc4) returned 1
	[0061.818] GetUserNameA (in: lpBuffer=0x4183c1, pcbBuffer=0x192dc4 | out: lpBuffer="FD1HVy", pcbBuffer=0x192dc4) returned 1
	[0061.821] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x418409, nSize=0x1000 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\kvr.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\kvr.exe")) returned 0x2a
	[0061.821] GetSystemDefaultLCID () returned 0x409
	[0061.821] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 8
	[0061.822] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x9) returned 0x8704a0
	[0061.822] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x8704a0, cchData=8 | out: lpLCData="English") returned 8
	[0061.822] _strcmpi (_Str1="English", _Str2="Russian") returned -1
	[0061.822] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x12e) returned 0x8704b8
	[0061.822] GetProcAddress (hModule=0x77970000, lpProcName="RtlDecompressBuffer") returned 0x779e1bc0
	[0061.822] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8704b8, UncompressedBufferSize=0x12e, CompressedBuffer=0x4094d4, CompressedBufferSize=0x13c, FinalUncompressedSize=0x192d60 | out: UncompressedBuffer=0x8704b8, FinalUncompressedSize=0x192d60) returned 0x0
	[0061.822] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0xc00) returned 0x870a40
	[0061.822] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x870a40, UncompressedBufferSize=0xc00, CompressedBuffer=0x409610, CompressedBufferSize=0x536, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x870a40, FinalUncompressedSize=0x192d5c) returned 0x0
	[0061.822] GetProcessHeap () returned 0x5f0000
	[0061.822] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x12) returned 0x604778
	[0061.822] _swprintf (in: param_1=0x40fb80, param_2="%s%s.exe" | out: param_1="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\sxr.exe") returned 42
	[0061.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\sxr.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\sxr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210
	[0061.823] WriteFile (in: hFile=0x210, lpBuffer=0x870a40*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x192db8, lpOverlapped=0x0 | out: lpBuffer=0x870a40*, lpNumberOfBytesWritten=0x192db8*=0xc00, lpOverlapped=0x0) returned 1
	[0061.824] FlushFileBuffers (hFile=0x210) returned 1
	[0061.832] CloseHandle (hObject=0x210) returned 1
	[0061.834] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x870a40 | out: hHeap=0x870000) returned 1
	[0061.834] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x9, Size=0x4e20) returned 0x870a40
	[0061.834] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x870a40, UncompressedBufferSize=0x323, CompressedBuffer=0x40a3da, CompressedBufferSize=0x25a, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x870a40, FinalUncompressedSize=0x192d5c) returned 0x0
	[0061.834] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x9, Size=0x85c) returned 0x875868
	[0061.834] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x875868, UncompressedBufferSize=0x42e, CompressedBuffer=0x40a634, CompressedBufferSize=0x3d4, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x875868, FinalUncompressedSize=0x192d5c) returned 0x0
	[0061.834] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x9, Size=0x36) returned 0x8705f0
	[0061.834] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8705f0, UncompressedBufferSize=0x1b, CompressedBuffer=0x40aa08, CompressedBufferSize=0x21, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x8705f0, FinalUncompressedSize=0x192d5c) returned 0x0
	[0061.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210
	[0061.834] GetFileSize (in: hFile=0x210, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x384
	[0061.834] ReadFile (in: hFile=0x210, lpBuffer=0x611448, nNumberOfBytesToRead=0x384, lpNumberOfBytesRead=0x192dc4, lpOverlapped=0x0 | out: lpBuffer=0x611448*, lpNumberOfBytesRead=0x192dc4*=0x384, lpOverlapped=0x0) returned 1
	[0061.835] CloseHandle (hObject=0x210) returned 1
	[0061.835] sprintf (in: _Dest=0x192d58, _Format="\\\\.\\PHYSICALDRIVE%d" | out: _Dest="\\\\.\\PHYSICALDRIVE0") returned 18
	[0061.835] CreateFileA (lpFileName="\\\\.\\PHYSICALDRIVE0" (normalized: "\\device\\harddisk0\\dr0"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210
	[0061.837] DeviceIoControl (in: hDevice=0x210, dwIoControlCode=0x70000, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x192d30, nOutBufferSize=0x18, lpBytesReturned=0x192d28, lpOverlapped=0x0 | out: lpOutBuffer=0x192d30*, lpBytesReturned=0x192d28*=0x18, lpOverlapped=0x0) returned 1
	[0061.837] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x200) returned 0x8760d0
	[0061.837] ReadFile (in: hFile=0x210, lpBuffer=0x8760d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8760d0*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.837] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x200) returned 0x8762d8
	[0061.837] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x200) returned 0x8764e0
	[0061.837] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.837] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.838] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.838] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.838] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.839] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.839] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.839] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.840] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.840] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.841] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.841] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.841] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.842] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.842] ReadFile (in: hFile=0x210, lpBuffer=0x8762d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8762d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.842] SetFilePointer (in: hFile=0x210, lDistanceToMove=1024, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x400
	[0061.842] WriteFile (in: hFile=0x210, lpBuffer=0x611448*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x611448*, lpNumberOfBytesWritten=0x192d28*=0x800, lpOverlapped=0x0) returned 1
	[0061.843] GetLocalTime (in: lpSystemTime=0x192db8 | out: lpSystemTime=0x192db8*(wYear=0x7e4, wMonth=0x3, wDayOfWeek=0x4, wDay=0xc, wHour=0x4, wMinute=0x6, wSecond=0x8, wMilliseconds=0xd7)) 
	[0061.843] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x200) returned 0x8766e8
	[0061.848] SetFilePointer (in: hFile=0x210, lDistanceToMove=3072, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc00
	[0061.848] WriteFile (in: hFile=0x210, lpBuffer=0x8766e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8766e8*, lpNumberOfBytesWritten=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.848] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8766e8 | out: hHeap=0x870000) returned 1
	[0061.848] SetFilePointer (in: hFile=0x210, lDistanceToMove=512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x200
	[0061.848] WriteFile (in: hFile=0x210, lpBuffer=0x8760d0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8760d0*, lpNumberOfBytesWritten=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.849] SetFilePointer (in: hFile=0x210, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0061.849] WriteFile (in: hFile=0x210, lpBuffer=0x8764e0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8764e0*, lpNumberOfBytesWritten=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0061.849] CloseHandle (hObject=0x210) returned 1
	[0061.849] sprintf (in: _Dest=0x192d58, _Format="\\\\.\\PHYSICALDRIVE%d" | out: _Dest="\\\\.\\PHYSICALDRIVE1") returned 18
	[0061.854] CreateFileA (lpFileName="\\\\.\\PHYSICALDRIVE1" (normalized: "physicaldrive1"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.854] DeviceIoControl (in: hDevice=0xffffffff, dwIoControlCode=0x70000, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x192d30, nOutBufferSize=0x18, lpBytesReturned=0x192d28, lpOverlapped=0x0 | out: lpOutBuffer=0x192d30, lpBytesReturned=0x192d28, lpOverlapped=0x0) returned 0
	[0061.854] CloseHandle (hObject=0xffffffff) returned 1
	[0061.854] _alloca_probe () returned 0x40401d
	[0061.854] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Control\\Session Manager", ulOptions=0x0, samDesired=0x2001f, phkResult=0x192dc4 | out: phkResult=0x192dc4*=0x210) returned 0x0
	[0061.854] RegQueryValueExW (in: hKey=0x210, lpValueName="BootExecute", lpReserved=0x0, lpType=0x192dbc, lpData=0x190dbc, lpcbData=0x192dc0*=0x1000 | out: lpType=0x192dbc*=0x7, lpData=0x190dbc*, lpcbData=0x192dc0*=0x2a) returned 0x0
	[0061.854] RegSetValueExW (in: hKey=0x210, lpValueName="BootExecute", Reserved=0x0, dwType=0x7, lpData=0x190dbc*, cbData=0x7e | out: lpData=0x190dbc*) returned 0x0
	[0061.855] RegCloseKey (hKey=0x210) returned 0x0
	[0061.855] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_ARCHITECTURE%", lpDst=0x192578, nSize=0x104 | out: lpDst="x86") returned 0x4
	[0061.855] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_IDENTIFIER%", lpDst=0x192988, nSize=0x104 | out: lpDst="Intel64 Family 6 Model 85 Stepping 4, GenuineIntel") returned 0x33
	[0061.855] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_LEVEL%", lpDst=0x192b90, nSize=0x104 | out: lpDst="6") returned 0x2
	[0061.855] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_REVISION%", lpDst=0x192780, nSize=0x104 | out: lpDst="5504") returned 0x5
	[0061.855] sprintf (in: _Dest=0x192d98, _Format="%s%s%s%s" | out: _Dest="xI65") returned 4
	[0061.855] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0061.855] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0061.855] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0061.855] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0061.855] MD5Init () returned 0x1924f8
	[0061.855] MD5Update () returned 0x192510
	[0061.855] MD5Final () returned 0x0
	[0061.855] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="ADB30A2AD9591DD667796100DD07A7A7", ulOptions=0x0, samDesired=0x1, phkResult=0x192dc4 | out: phkResult=0x192dc4*=0x214) returned 0x0
	[0061.855] RegQueryValueExA (in: hKey=0x214, lpValueName="E-mail", lpReserved=0x0, lpType=0x192dbc, lpData=0x413b88, lpcbData=0x192dc0*=0x30 | out: lpType=0x192dbc*=0x1, lpData="coronaVi2022@protonmail.ch", lpcbData=0x192dc0*=0x30) returned 0x0
	[0061.855] RegQueryValueExA (in: hKey=0x214, lpValueName="BTC", lpReserved=0x0, lpType=0x192dbc, lpData=0x415dd4, lpcbData=0x192dc0*=0x30 | out: lpType=0x192dbc*=0x1, lpData="bc1qzww0kjteu52w50m3d2ucp72zh5dwchph9vqj6k", lpcbData=0x192dc0*=0x30) returned 0x0
	[0061.855] RegCloseKey (hKey=0x214) returned 0x0
	[0061.855] GetTickCount () returned 0x1150ffa
	[0061.855] _alloca_probe () returned 0x404aed
	[0061.856] mbstowcs (in: _Dest=0x415e10, _Source="coronaVi2022@protonmail.ch", _MaxCount=0x82 | out: _Dest="coronaVi2022@protonmail.ch") returned 0x1a
	[0061.856] OutputDebugStringA (lpOutputString="%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s") 
	[0061.857] OutputDebugStringA (lpOutputString="©RZA") 
	[0061.857] OutputDebugStringW (lpOutputString="%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s") 
	[0061.857] sprintf (in: _Dest=0x40cf48, _Format="%X%X%X%X%X%X%X%X" | out: _Dest="17D3D8DC3C17D309794D716E2A6A14008C4365BB100B059C21B5CBE833316CCE") returned 64
	[0061.858] GetWindowsDirectoryW (in: lpBuffer=0x40da80, uSize=0x1000 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0061.858] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64EnableWow64FsRedirection") returned 0x77326eb0
	[0061.858] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=0) returned 1
	[0061.858] GetSystemDirectoryW (in: lpBuffer=0x190cc0, uSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0061.858] mbstowcs (in: _Dest=0x5ff360, _Source="\\VSSADMIN.EXE", _MaxCount=0x1000 | out: _Dest="\\VSSADMIN.EXE") returned 0xd
	[0061.858] _swprintf (in: param_1=0x18acc0, param_2="%s%s" | out: param_1="C:\\WINDOWS\\system32\\VSSADMIN.EXE") returned 32
	[0061.858] mbstowcs (in: _Dest=0x5ff360, _Source="Delete Shadows /All /Quiet", _MaxCount=0x1000 | out: _Dest="Delete Shadows /All /Quiet") returned 0x1a
	[0061.858] _alloca_probe () returned 0x405bfd
	[0061.858] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\VSSADMIN.EXE" (normalized: "c:\\windows\\system32\\vssadmin.exe")) returned 0x20
	[0061.859] GetShellWindow () returned 0x100f0
	[0061.859] ShellExecuteExW (in: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\VSSADMIN.EXE", lpParameters="Delete Shadows /All /Quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\VSSADMIN.EXE", lpParameters="Delete Shadows /All /Quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0063.409] mbstowcs (in: _Dest=0x5ff360, _Source="wbadmin.exe", _MaxCount=0x1000 | out: _Dest="wbadmin.exe") returned 0xb
	[0063.409] _swprintf (in: param_1=0x18acc0, param_2="%s\\%s" | out: param_1="C:\\WINDOWS\\system32\\wbadmin.exe") returned 31
	[0063.409] mbstowcs (in: _Dest=0x5ff360, _Source="delete backup -keepVersions:0 -quiet", _MaxCount=0x1000 | out: _Dest="delete backup -keepVersions:0 -quiet") returned 0x24
	[0063.409] _alloca_probe () returned 0x405bfd
	[0063.409] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\wbadmin.exe" (normalized: "c:\\windows\\system32\\wbadmin.exe")) returned 0x20
	[0063.409] GetShellWindow () returned 0x100f0
	[0063.409] ShellExecuteExW (in: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete backup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete backup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0065.550] mbstowcs (in: _Dest=0x5ff360, _Source="wbadmin.exe", _MaxCount=0x1000 | out: _Dest="wbadmin.exe") returned 0xb
	[0065.550] _swprintf (in: param_1=0x18acc0, param_2="%s\\%s" | out: param_1="C:\\WINDOWS\\system32\\wbadmin.exe") returned 31
	[0065.550] mbstowcs (in: _Dest=0x5ff360, _Source="delete systemstatebackup -keepVersions:0 -quiet", _MaxCount=0x1000 | out: _Dest="delete systemstatebackup -keepVersions:0 -quiet") returned 0x2f
	[0065.550] _alloca_probe () returned 0x405bfd
	[0065.550] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\wbadmin.exe" (normalized: "c:\\windows\\system32\\wbadmin.exe")) returned 0x20
	[0065.550] GetShellWindow () returned 0x100f0
	[0065.550] ShellExecuteExW (in: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete systemstatebackup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete systemstatebackup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0065.841] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=1) returned 1
	[0065.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404120, lpParameter=0x0, dwCreationFlags=0x4, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228
	[0065.842] NtSetInformationThread (ThreadHandle=0x228, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0
	[0065.842] SetThreadPriority (hThread=0x228, nPriority=15) returned 1
	[0065.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403bd0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8
	[0065.842] NtSetInformationThread (ThreadHandle=0x2a8, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0
	[0065.842] SetThreadPriority (hThread=0x2a8, nPriority=15) returned 1
	[0065.844] Sleep (dwMilliseconds=0x2d49) 
	[0076.047] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x1c4dd) returned 0x0
	[0076.047] WaitForMultipleObjects (nCount=0x3c, lpHandles=0x419460*=0x0, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0xffffffff
	[0076.047] WaitForMultipleObjects (nCount=0x3, lpHandles=0x419460*=0x0, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0xffffffff
	[0076.047] ResumeThread (hThread=0x228) returned 0x1
	[0076.048] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0xffffffff) 

Thread:
	id = 23
	os_tid = 0xdd8


Thread:
	id = 24
	os_tid = 0x798


Thread:
	id = 25
	os_tid = 0xdfc


Thread:
	id = 26
	os_tid = 0xac8


Thread:
	id = 27
	os_tid = 0x5b8


Thread:
	id = 28
	os_tid = 0xe90


Thread:
	id = 29
	os_tid = 0xed0


Thread:
	id = 30
	os_tid = 0xd94


Thread:
	id = 32
	os_tid = 0x980


Thread:
	id = 40
	os_tid = 0x1308


Thread:
	id = 43
	os_tid = 0x13dc

	[0076.047] NtYieldExecution () returned 0x0
	[0076.048] Sleep (dwMilliseconds=0x3e8) 
	[0077.058] NtYieldExecution () returned 0x0
	[0077.058] Sleep (dwMilliseconds=0x3e8) 
	[0078.081] NtYieldExecution () returned 0x0
	[0078.105] Sleep (dwMilliseconds=0x3e8) 
	[0079.130] NtYieldExecution () returned 0x0
	[0079.151] Sleep (dwMilliseconds=0x3e8) 
	[0080.169] NtYieldExecution () returned 0x0
	[0080.214] Sleep (dwMilliseconds=0x3e8) 
	[0081.216] NtYieldExecution () returned 0x0
	[0081.227] Sleep (dwMilliseconds=0x3e8) 
	[0082.251] NtYieldExecution () returned 0x0
	[0082.253] Sleep (dwMilliseconds=0x3e8) 
	[0083.258] NtYieldExecution () returned 0x0
	[0083.261] Sleep (dwMilliseconds=0x3e8) 
	[0084.291] NtYieldExecution () returned 0x0
	[0084.292] Sleep (dwMilliseconds=0x3e8) 
	[0085.368] NtYieldExecution () returned 0x0
	[0085.405] Sleep (dwMilliseconds=0x3e8) 
	[0086.417] NtYieldExecution () returned 0x0
	[0086.438] Sleep (dwMilliseconds=0x3e8) 
	[0087.446] NtYieldExecution () returned 0x0
	[0087.454] Sleep (dwMilliseconds=0x3e8) 
	[0088.458] NtYieldExecution () returned 0x0
	[0088.459] Sleep (dwMilliseconds=0x3e8) 
	[0089.475] NtYieldExecution () returned 0x0
	[0089.475] Sleep (dwMilliseconds=0x3e8) 
	[0090.490] NtYieldExecution () returned 0x0
	[0090.537] Sleep (dwMilliseconds=0x3e8) 
	[0091.541] NtYieldExecution () returned 0x0
	[0091.557] Sleep (dwMilliseconds=0x3e8) 
	[0092.573] NtYieldExecution () returned 0x0
	[0092.573] Sleep (dwMilliseconds=0x3e8) 
	[0093.588] NtYieldExecution () returned 0x0
	[0093.589] Sleep (dwMilliseconds=0x3e8) 
	[0094.606] NtYieldExecution () returned 0x0
	[0094.606] Sleep (dwMilliseconds=0x3e8) 
	[0095.619] NtYieldExecution () returned 0x0
	[0095.620] Sleep (dwMilliseconds=0x3e8) 
	[0096.636] NtYieldExecution () returned 0x0
	[0096.639] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 44
	os_tid = 0x1324

	[0065.843] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5
	[0065.843] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x642460 | out: lpBuffer="C:\\") returned 0x4
	[0065.843] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0065.843] SetVolumeLabelW (lpRootPathName="C:\\", lpVolumeName="CoronaVirus") returned 1
	[0066.026] wcsncpy (in: _Dest=0x64ae58, _Source="C:\\", _Count=0x2 | out: _Dest="C:") returned="C:"
	[0066.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4036c0, lpParameter=0x64ae58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f0
	[0066.027] Sleep (dwMilliseconds=0x64) 
	[0066.142] NtYieldExecution () returned 0x0
	[0066.145] NtYieldExecution () returned 0x0
	[0066.145] NtYieldExecution () returned 0x0
	[0066.145] RtlExitUserThread (Status=0x0) 

Thread:
	id = 49
	os_tid = 0x135c

	[0066.055] _alloca_probe () returned 0x4036d0
	[0066.057] GetFullPathNameW (in: lpFileName="C:", nBufferLength=0x1000, lpBuffer=0x31a9f80, lpFilePart=0x31a1d2c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x31a1d2c*="Desktop") returned 0x17
	[0066.057] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x63bda0
	[0066.057] wcsncmp (_String1="$", _String2=".", _MaxCount=0x1) returned -10
	[0066.057] wcsncmp (_String1="$G", _String2="..", _MaxCount=0x2) returned -10
	[0066.057] _swprintf (in: param_1=0x31a1f80, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent") returned 14
	[0066.057] wcsncmp (_String1="C:\\$GetCu", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0066.057] wcsstr (_Str="C:\\$GetCurrent", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.057] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$GetCurrent\\CoronaVirus.txt" (normalized: "c:\\$getcurrent\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.071] _alloca_probe () returned 0x4036d0
	[0066.072] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent", nBufferLength=0x1000, lpBuffer=0x319bd08, lpFilePart=0x3193ab4 | out: lpBuffer="C:\\$GetCurrent", lpFilePart=0x3193ab4*="$GetCurrent") returned 0xe
	[0066.072] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*.*", lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2fa32e1e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0066.072] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.072] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2fa32e1e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.072] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.072] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa32e1e, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fa32e1e, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.072] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.072] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.072] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.072] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.072] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.072] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.072] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.072] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.073] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.073] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.073] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.073] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.073] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.073] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.073] malloc (_Size=0x1000) returned 0x2106cc0
	[0066.073] _swprintf (in: param_1=0x2106cc0, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\CoronaVirus.txt") returned 30
	[0066.073] wcsstr (_Str="C:\\$GetCurrent\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.073] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0066.073] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.073] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.073] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\Logs") returned 19
	[0066.073] wcsncmp (_String1="C:\\$GetCu", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0066.073] wcsstr (_Str="C:\\$GetCurrent\\Logs", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.073] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$GetCurrent\\Logs\\CoronaVirus.txt" (normalized: "c:\\$getcurrent\\logs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.079] _alloca_probe () returned 0x4036d0
	[0066.080] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\$GetCurrent\\Logs", lpFilePart=0x318583c*="Logs") returned 0x13
	[0066.080] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2fa58fd4, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c060
	[0066.081] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.081] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2fa58fd4, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.081] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.081] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa58fd4, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fa58fd4, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.081] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.081] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.081] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.081] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.081] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.081] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.081] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.081] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.081] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.081] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.081] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.081] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.081] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.081] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.081] malloc (_Size=0x1000) returned 0x2107cc8
	[0066.081] _swprintf (in: param_1=0x2107cc8, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\Logs\\CoronaVirus.txt") returned 35
	[0066.081] wcsstr (_Str="C:\\$GetCurrent\\Logs\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.081] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0066.081] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0066.081] wcsncmp (_String1="do", _String2="..", _MaxCount=0x2) returned 54
	[0066.081] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.081] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0066.081] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.081] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0066.081] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.081] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0066.081] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.081] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0066.081] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.082] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0066.082] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0066.083] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.083] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858ae | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0066.084] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0066.084] wcsncmp (_String1="o", _String2=".", _MaxCount=0x1) returned 65
	[0066.084] wcsncmp (_String1="oo", _String2="..", _MaxCount=0x2) returned 65
	[0066.084] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0066.084] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.084] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0066.085] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.085] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0066.086] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.086] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a4 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0066.087] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0066.087] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0066.087] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.087] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0066.087] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.088] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0066.088] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.089] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0066.089] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.090] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0066.090] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.090] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0066.090] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.090] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0066.090] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.090] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0066.090] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.090] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0066.090] _wcslwr (in: _String=0x31858a0 | out: _String=".log") returned=".log"
	[0066.090] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0066.090] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0
	[0066.090] FindClose (in: hFindFile=0x63c060 | out: hFindFile=0x63c060) returned 1
	[0066.090] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0066.090] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.090] wcsncmp (_String1="Sa", _String2="..", _MaxCount=0x2) returned 37
	[0066.090] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\SafeOS") returned 21
	[0066.090] wcsncmp (_String1="C:\\$GetCu", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0066.090] wcsstr (_Str="C:\\$GetCurrent\\SafeOS", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.090] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\CoronaVirus.txt" (normalized: "c:\\$getcurrent\\safeos\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.094] _alloca_probe () returned 0x4036d0
	[0066.094] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\SafeOS", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\$GetCurrent\\SafeOS", lpFilePart=0x318583c*="SafeOS") returned 0x15
	[0066.094] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x2fa7f4fa, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0066.094] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.094] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x2fa7f4fa, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.095] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.095] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa7f4fa, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fa7f4fa, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.095] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.095] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.095] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.095] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.095] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.095] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.095] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.095] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.095] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.095] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.095] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.095] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.095] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.095] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.095] malloc (_Size=0x1000) returned 0x2108cd0
	[0066.095] _swprintf (in: param_1=0x2108cd0, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\SafeOS\\CoronaVirus.txt") returned 37
	[0066.095] wcsstr (_Str="C:\\$GetCurrent\\SafeOS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.095] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0066.095] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0066.095] wcsncmp (_String1="Ge", _String2="..", _MaxCount=0x2) returned 25
	[0066.095] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.095] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.096] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.096] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.097] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.097] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.098] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.098] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0066.098] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0066.098] wcsncmp (_String1="Ge", _String2="..", _MaxCount=0x2) returned 25
	[0066.098] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.098] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.098] wcsstr (_Str=".bat", _SubStr=".ini") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.098] wcsstr (_Str=".doc", _SubStr=".ini") returned 0x0
	[0066.098] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".jpg", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".jpe", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".txt", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".tex", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".dbf", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".xls", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".cry", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".xml", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".vsd", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".pdf", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".csv", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".bmp", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".tif", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".1cd", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".tax", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".gif", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".gbr", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".png", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".mdb", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.099] wcsstr (_Str=".mdf", _SubStr=".ini") returned 0x0
	[0066.099] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".sdf", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".dwg", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".dxf", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".dgn", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".stl", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".gho", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".v2i", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".3ds", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".ppt", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".acc", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".vpd", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".odt", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".ods", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".rar", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".zip", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".cpp", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".pas", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".asm", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".rtf", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.100] wcsstr (_Str=".lic", _SubStr=".ini") returned 0x0
	[0066.100] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".avi", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".mov", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".mp3", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".vbs", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".v8i", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".erf", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".epf", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".mxl", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".cfu", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".mht", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185890 | out: _String=".ini") returned=".ini"
	[0066.101] wcsstr (_Str=".old", _SubStr=".ini") returned 0x0
	[0066.101] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0066.101] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0066.101] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0066.101] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.101] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.101] wcsstr (_Str=".bat", _SubStr=".cmd") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.101] wcsstr (_Str=".doc", _SubStr=".cmd") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.101] wcsstr (_Str=".jpg", _SubStr=".cmd") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.101] wcsstr (_Str=".jpe", _SubStr=".cmd") returned 0x0
	[0066.101] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.101] wcsstr (_Str=".txt", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".tex", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".dbf", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".xls", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".cry", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".xml", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".vsd", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".pdf", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".csv", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".bmp", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".tif", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".1cd", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".tax", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".gif", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".gbr", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".png", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".mdb", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".mdf", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".sdf", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".dwg", _SubStr=".cmd") returned 0x0
	[0066.102] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.102] wcsstr (_Str=".dxf", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".dgn", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".stl", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".gho", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".v2i", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".3ds", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".ppt", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".acc", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".vpd", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".odt", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".ods", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".rar", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".zip", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".cpp", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".pas", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".asm", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".rtf", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".lic", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".avi", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".mov", _SubStr=".cmd") returned 0x0
	[0066.103] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.103] wcsstr (_Str=".mp3", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".vbs", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".v8i", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".erf", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".epf", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".mxl", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".cfu", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".mht", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x3185894 | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".old", _SubStr=".cmd") returned 0x0
	[0066.104] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0066.104] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0066.104] wcsncmp (_String1="pr", _String2="..", _MaxCount=0x2) returned 66
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".bat", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".doc", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".jpg", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".jpe", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".txt", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".tex", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.104] wcsstr (_Str=".dbf", _SubStr=".cmd") returned 0x0
	[0066.104] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".xls", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".cry", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".xml", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".vsd", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".pdf", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".csv", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".bmp", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".tif", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".1cd", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".tax", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".gif", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".gbr", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".png", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".mdb", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".mdf", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".sdf", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".dwg", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".dxf", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".dgn", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.105] wcsstr (_Str=".stl", _SubStr=".cmd") returned 0x0
	[0066.105] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".gho", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".v2i", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".3ds", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".ppt", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".acc", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".vpd", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".odt", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".ods", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".rar", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".zip", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".cpp", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".pas", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".asm", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".rtf", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".lic", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".avi", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".mov", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".mp3", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".vbs", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.106] wcsstr (_Str=".v8i", _SubStr=".cmd") returned 0x0
	[0066.106] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".erf", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".epf", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".mxl", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".cfu", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".mht", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x318587a | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".old", _SubStr=".cmd") returned 0x0
	[0066.107] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0066.107] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.107] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".bat", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".doc", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".jpg", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".jpe", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".txt", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".tex", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".dbf", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".xls", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".cry", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.107] wcsstr (_Str=".xml", _SubStr=".cmd") returned 0x0
	[0066.107] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".vsd", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".pdf", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".csv", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".bmp", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".tif", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".1cd", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".tax", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".gif", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".gbr", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".png", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".mdb", _SubStr=".cmd") returned 0x0
	[0066.108] _wcslwr (in: _String=0x3185886 | out: _String=".cmd") returned=".cmd"
	[0066.108] wcsstr (_Str=".mdf", _SubStr=".cmd") returned 0x0
	[0066.108] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0066.108] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0066.108] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0066.108] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0066.108] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0066.108] wcsncmp (_String1="$", _String2=".", _MaxCount=0x1) returned -10
	[0066.109] wcsncmp (_String1="$R", _String2="..", _MaxCount=0x2) returned -10
	[0066.109] _swprintf (in: param_1=0x31a1f80, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin") returned 15
	[0066.109] wcsncmp (_String1="C:\\$Recyc", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0066.109] wcsstr (_Str="C:\\$Recycle.Bin", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.109] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$Recycle.Bin\\CoronaVirus.txt" (normalized: "c:\\$recycle.bin\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.192] _alloca_probe () returned 0x4036d0
	[0066.192] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x1000, lpBuffer=0x319bd08, lpFilePart=0x3193ab4 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x3193ab4*="$Recycle.Bin") returned 0xf
	[0066.192] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*.*", lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fb8a2a3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0066.192] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.192] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fb8a2a3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.192] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.192] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb8a2a3, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fb8a2a3, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.192] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.192] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.192] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.192] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.192] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.193] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.193] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.193] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.193] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.193] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.193] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.193] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.193] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0066.193] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.193] malloc (_Size=0x1000) returned 0x2109cd8
	[0066.193] _swprintf (in: param_1=0x2109cd8, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\CoronaVirus.txt") returned 31
	[0066.193] wcsstr (_Str="C:\\$Recycle.Bin\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.193] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0066.193] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.193] wcsncmp (_String1="S-", _String2="..", _MaxCount=0x2) returned 37
	[0066.193] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0066.193] wcsncmp (_String1="C:\\$Recyc", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0066.193] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-18", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.193] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$Recycle.Bin\\S-1-5-18\\CoronaVirus.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.197] _alloca_probe () returned 0x4036d0
	[0066.197] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-18", lpFilePart=0x318583c*="S-1-5-18") returned 0x18
	[0066.197] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fb8a2a3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0066.197] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.197] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fb8a2a3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.197] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.197] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb8a2a3, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fb8a2a3, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.197] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.197] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.197] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.197] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.197] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.197] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.197] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.197] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.197] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.197] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.197] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.197] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.197] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.197] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.197] malloc (_Size=0x1000) returned 0x210ace0
	[0066.198] _swprintf (in: param_1=0x210ace0, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-18\\CoronaVirus.txt") returned 40
	[0066.198] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-18\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.198] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0066.198] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0066.198] wcsncmp (_String1="de", _String2="..", _MaxCount=0x2) returned 54
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".bat", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".doc", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".jpg", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".jpe", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".txt", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".tex", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".dbf", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".xls", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".cry", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".xml", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".vsd", _SubStr=".ini") returned 0x0
	[0066.198] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.198] wcsstr (_Str=".pdf", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".csv", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".bmp", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".tif", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".1cd", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".tax", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".gif", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".gbr", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".png", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".mdb", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".mdf", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".sdf", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".dwg", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".dxf", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".dgn", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".stl", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".gho", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".v2i", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".3ds", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".ppt", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.199] wcsstr (_Str=".acc", _SubStr=".ini") returned 0x0
	[0066.199] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".vpd", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".odt", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".ods", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".rar", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".zip", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".cpp", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".pas", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".asm", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".rtf", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".lic", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".avi", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".mov", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".mp3", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".vbs", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".v8i", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".erf", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".epf", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".mxl", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".cfu", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.200] wcsstr (_Str=".mht", _SubStr=".ini") returned 0x0
	[0066.200] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.201] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0066.201] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.201] wcsstr (_Str=".old", _SubStr=".ini") returned 0x0
	[0066.201] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0066.201] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0066.201] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0066.201] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.201] wcsncmp (_String1="S-", _String2="..", _MaxCount=0x2) returned 37
	[0066.201] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 61
	[0066.201] wcsncmp (_String1="C:\\$Recyc", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0066.201] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.201] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\CoronaVirus.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.204] _alloca_probe () returned 0x4036d0
	[0066.204] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x318583c*="S-1-5-21-1051304884-625712362-2192934891-1000") returned 0x3d
	[0066.204] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x2fb8a2a3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0066.204] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.204] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x2fb8a2a3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.204] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.204] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb8a2a3, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fb8a2a3, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.204] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.204] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.204] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.204] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.204] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.204] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.204] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.204] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.204] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.204] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.204] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.204] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.204] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.205] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.205] malloc (_Size=0x1000) returned 0x210bce8
	[0066.205] _swprintf (in: param_1=0x210bce8, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\CoronaVirus.txt") returned 77
	[0066.205] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.205] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0066.205] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0066.205] wcsncmp (_String1="de", _String2="..", _MaxCount=0x2) returned 54
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".bat", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".doc", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".jpg", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".jpe", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".txt", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".tex", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".dbf", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".xls", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".cry", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".xml", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".vsd", _SubStr=".ini") returned 0x0
	[0066.205] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.205] wcsstr (_Str=".pdf", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".csv", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".bmp", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".tif", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".1cd", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".tax", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".gif", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".gbr", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".png", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".mdb", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".mdf", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".sdf", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".dwg", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".dxf", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".dgn", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".stl", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".gho", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".v2i", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".3ds", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".ppt", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".acc", _SubStr=".ini") returned 0x0
	[0066.206] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.206] wcsstr (_Str=".vpd", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".odt", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".ods", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".rar", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".zip", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".cpp", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".pas", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".asm", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".rtf", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".lic", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".avi", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".mov", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".mp3", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".vbs", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".v8i", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".erf", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".epf", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".mxl", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".cfu", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".mht", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0066.207] _wcslwr (in: _String=0x318587a | out: _String=".ini") returned=".ini"
	[0066.207] wcsstr (_Str=".old", _SubStr=".ini") returned 0x0
	[0066.207] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0066.208] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0066.208] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0066.208] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0066.208] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0066.208] wcsncmp (_String1="$", _String2=".", _MaxCount=0x1) returned -10
	[0066.208] wcsncmp (_String1="$W", _String2="..", _MaxCount=0x2) returned -10
	[0066.208] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0066.208] wcsncmp (_String1="5", _String2=".", _MaxCount=0x1) returned 7
	[0066.208] wcsncmp (_String1="58", _String2="..", _MaxCount=0x2) returned 7
	[0066.208] _swprintf (in: param_1=0x31a1f80, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212") returned 21
	[0066.208] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.208] wcsstr (_Str="C:\\588bce7c90097ed212", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.208] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.212] _alloca_probe () returned 0x4036d0
	[0066.212] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212", nBufferLength=0x1000, lpBuffer=0x319bd08, lpFilePart=0x3193ab4 | out: lpBuffer="C:\\588bce7c90097ed212", lpFilePart=0x3193ab4*="588bce7c90097ed212") returned 0x15
	[0066.212] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*.*", lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fbb07f9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0066.212] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.212] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fbb07f9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.213] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.213] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1
	[0066.213] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.213] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.213] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025") returned 26
	[0066.213] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.213] wcsstr (_Str="C:\\588bce7c90097ed212\\1025", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.213] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.217] _alloca_probe () returned 0x4036d0
	[0066.218] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1025", lpFilePart=0x318583c*="1025") returned 0x1a
	[0066.218] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fbb07f9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0066.218] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.218] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fbb07f9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.218] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.218] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbb07f9, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fbb07f9, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.218] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.218] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.218] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.218] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.218] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.218] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.218] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.218] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.218] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.218] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.218] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.218] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.218] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.218] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.218] malloc (_Size=0x1000) returned 0x210ccf0
	[0066.219] _swprintf (in: param_1=0x210ccf0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\CoronaVirus.txt") returned 42
	[0066.219] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.219] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.219] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.219] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.219] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.219] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.220] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.220] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.221] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.221] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.221] malloc (_Size=0x1000) returned 0x210dcf8
	[0066.221] _swprintf (in: param_1=0x210dcf8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0066.221] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.221] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.221] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x210dcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x414
	[0066.222] SetThreadPriority (hThread=0x414, nPriority=15) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.223] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.229] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.229] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.230] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.230] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.231] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.231] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.231] malloc (_Size=0x1000) returned 0x31b0048
	[0066.232] _swprintf (in: param_1=0x31b0048, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0066.232] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.232] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.232] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b0048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41c
	[0066.232] SetThreadPriority (hThread=0x41c, nPriority=15) returned 1
	[0066.244] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.244] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.244] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.244] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.244] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.244] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.250] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.250] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.250] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.250] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.253] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.255] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.255] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.256] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.256] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.257] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.257] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.257] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.257] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0066.258] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1
	[0066.258] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.258] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.258] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028") returned 26
	[0066.258] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.258] wcsstr (_Str="C:\\588bce7c90097ed212\\1028", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.258] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.309] _alloca_probe () returned 0x4036d0
	[0066.309] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1028", lpFilePart=0x318583c*="1028") returned 0x1a
	[0066.309] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fc955d1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c0e0
	[0066.309] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.309] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fc955d1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.309] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.309] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc955d1, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fc955d1, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.309] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.309] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.309] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.309] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.309] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.309] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.309] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.309] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.309] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.309] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.309] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.309] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.309] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.309] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.309] malloc (_Size=0x1000) returned 0x210dcf8
	[0066.309] _swprintf (in: param_1=0x210dcf8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\CoronaVirus.txt") returned 42
	[0066.309] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.309] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.309] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.309] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.310] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.311] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.312] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.312] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.312] malloc (_Size=0x1000) returned 0x31b1050
	[0066.312] _swprintf (in: param_1=0x31b1050, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0066.312] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.312] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.312] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b1050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c
	[0066.312] SetThreadPriority (hThread=0x23c, nPriority=15) returned 1
	[0066.313] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.313] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.314] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.314] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.314] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.314] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.314] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.314] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.316] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.317] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.318] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.318] malloc (_Size=0x1000) returned 0x31b2058
	[0066.321] _swprintf (in: param_1=0x31b2058, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0066.321] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.321] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.321] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b2058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240
	[0066.321] SetThreadPriority (hThread=0x240, nPriority=15) returned 1
	[0066.323] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.323] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.324] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.324] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.330] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.330] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.330] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.330] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.330] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.330] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.330] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.330] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.330] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.330] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.336] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.337] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.337] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.337] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.337] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.337] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.337] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.337] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.337] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.337] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.337] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.337] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.337] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.338] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.338] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.339] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.339] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.339] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.339] FindClose (in: hFindFile=0x63c0e0 | out: hFindFile=0x63c0e0) returned 1
	[0066.339] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1
	[0066.339] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.339] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.340] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029") returned 26
	[0066.340] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.340] wcsstr (_Str="C:\\588bce7c90097ed212\\1029", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.340] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.344] _alloca_probe () returned 0x4036d0
	[0066.344] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1029", lpFilePart=0x318583c*="1029") returned 0x1a
	[0066.344] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fce276a, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c0a0
	[0066.344] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.344] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fce276a, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.345] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.345] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fce276a, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fce276a, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.345] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.345] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.345] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.345] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.345] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.345] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.345] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.345] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.345] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.345] malloc (_Size=0x1000) returned 0x31b1050
	[0066.345] _swprintf (in: param_1=0x31b1050, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\CoronaVirus.txt") returned 42
	[0066.345] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.345] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.345] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.345] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.345] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.345] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.345] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.345] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.345] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.345] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.345] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.345] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.346] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.346] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.347] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.347] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.347] malloc (_Size=0x1000) returned 0x31b3060
	[0066.347] _swprintf (in: param_1=0x31b3060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0066.347] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.347] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.347] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b3060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc
	[0066.348] SetThreadPriority (hThread=0x2dc, nPriority=15) returned 1
	[0066.349] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.349] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.350] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.350] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.350] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.350] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.350] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.350] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.351] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.352] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.352] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.352] malloc (_Size=0x1000) returned 0x31b4068
	[0066.353] _swprintf (in: param_1=0x31b4068, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0066.353] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.353] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.353] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b4068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x418
	[0066.353] SetThreadPriority (hThread=0x418, nPriority=15) returned 1
	[0066.355] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.355] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.355] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.355] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.361] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.361] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.361] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.361] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.361] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.361] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.361] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.361] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.361] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.361] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.361] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.361] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.367] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.367] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.367] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.367] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.371] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.371] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.372] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.372] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.372] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.372] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.372] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.372] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.372] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.372] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.372] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.373] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.373] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.374] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.374] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.374] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.374] FindClose (in: hFindFile=0x63c0a0 | out: hFindFile=0x63c0a0) returned 1
	[0066.376] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1
	[0066.376] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.377] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.377] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030") returned 26
	[0066.377] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.377] wcsstr (_Str="C:\\588bce7c90097ed212\\1030", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.377] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.381] _alloca_probe () returned 0x4036d0
	[0066.381] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1030", lpFilePart=0x318583c*="1030") returned 0x1a
	[0066.382] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fd541a2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0066.382] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.382] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x2fd541a2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.382] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.382] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd541a2, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fd541a2, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.382] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.382] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.382] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.382] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.382] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.382] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.382] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.382] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.382] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.382] malloc (_Size=0x1000) returned 0x31b5290
	[0066.382] _swprintf (in: param_1=0x31b5290, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\CoronaVirus.txt") returned 42
	[0066.382] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.382] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.382] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.382] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.382] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.382] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.382] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.382] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.382] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.382] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.383] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.383] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.384] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.384] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.384] malloc (_Size=0x1000) returned 0x31b6298
	[0066.385] _swprintf (in: param_1=0x31b6298, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0066.385] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.385] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.385] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c
	[0066.385] SetThreadPriority (hThread=0x42c, nPriority=15) returned 1
	[0066.580] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.580] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.581] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.581] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.581] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.581] malloc (_Size=0x1000) returned 0x31b0048
	[0066.581] _swprintf (in: param_1=0x31b0048, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0066.581] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.581] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.581] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b0048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x420
	[0066.582] SetThreadPriority (hThread=0x420, nPriority=15) returned 1
	[0066.583] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.583] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.583] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.583] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.583] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.583] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.583] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.584] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.584] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.584] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.584] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.584] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.584] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.584] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.584] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.584] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.584] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.584] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.584] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.584] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.584] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.589] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.589] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.589] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.589] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.589] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.589] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.589] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.589] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.589] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.589] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.589] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.590] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.595] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.595] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.595] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.595] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.595] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.681] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.681] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.683] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.683] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.683] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.685] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.685] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.686] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.686] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.686] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.686] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.686] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.686] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.686] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.686] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.686] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.686] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.686] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.686] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.686] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.686] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0066.686] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1
	[0066.686] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.686] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.686] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031") returned 26
	[0066.686] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.686] wcsstr (_Str="C:\\588bce7c90097ed212\\1031", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.686] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.691] _alloca_probe () returned 0x4036d0
	[0066.691] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1031", lpFilePart=0x318583c*="1031") returned 0x1a
	[0066.691] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3004edd5, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0066.691] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.691] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3004edd5, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.691] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.691] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30028e7c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30028e7c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.691] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.691] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.691] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.691] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.691] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.691] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.691] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.691] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.691] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.691] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.691] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.691] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.691] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.691] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.691] malloc (_Size=0x1000) returned 0x31b6298
	[0066.691] _swprintf (in: param_1=0x31b6298, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\CoronaVirus.txt") returned 42
	[0066.691] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.691] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.692] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.692] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.692] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.692] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.693] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.693] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.694] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.694] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.694] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.694] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.694] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.694] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.694] malloc (_Size=0x1000) returned 0x31b72a0
	[0066.694] _swprintf (in: param_1=0x31b72a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0066.694] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.694] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.694] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b72a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x434
	[0066.694] SetThreadPriority (hThread=0x434, nPriority=15) returned 1
	[0066.696] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.696] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.696] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.696] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.696] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.696] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.696] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.696] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.698] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.698] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.698] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.698] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.698] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.698] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.698] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.698] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.699] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.699] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.699] malloc (_Size=0x1000) returned 0x31b84c8
	[0066.702] _swprintf (in: param_1=0x31b84c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0066.702] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.702] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.702] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b84c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x438
	[0066.703] SetThreadPriority (hThread=0x438, nPriority=15) returned 1
	[0066.704] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.704] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.710] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.710] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.710] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.710] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.710] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.711] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.711] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.716] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.716] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.716] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.720] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.721] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.721] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.722] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.722] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.723] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.723] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.723] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.723] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.723] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.727] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.727] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.727] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.727] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.727] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.727] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.727] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.727] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.727] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.727] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.727] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.728] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.728] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.728] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.728] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0066.728] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1
	[0066.728] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.729] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.729] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032") returned 26
	[0066.729] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.729] wcsstr (_Str="C:\\588bce7c90097ed212\\1032", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.729] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.740] _alloca_probe () returned 0x4036d0
	[0066.740] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1032", lpFilePart=0x318583c*="1032") returned 0x1a
	[0066.740] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x300c22fa, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0066.740] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.740] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x300c22fa, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.740] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.740] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3009b398, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3009b398, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.740] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.740] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.740] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.740] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.740] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.740] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.740] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.740] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.740] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.740] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.740] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.740] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.741] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.741] malloc (_Size=0x1000) returned 0x31b2058
	[0066.741] _swprintf (in: param_1=0x31b2058, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\CoronaVirus.txt") returned 42
	[0066.741] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.741] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.741] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.741] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.741] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.741] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.742] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.742] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.742] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.743] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.743] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.744] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.744] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.744] malloc (_Size=0x1000) returned 0x31b72a0
	[0066.744] _swprintf (in: param_1=0x31b72a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.744] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.744] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.744] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b72a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0
	[0066.745] SetThreadPriority (hThread=0x2c0, nPriority=15) returned 1
	[0066.746] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.746] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.747] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.747] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.747] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.747] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.747] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.750] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.750] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.750] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.750] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.750] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.750] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.750] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.750] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.750] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.750] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.750] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.750] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.750] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.751] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.751] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.751] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.754] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.754] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.754] malloc (_Size=0x1000) returned 0x31b72a0
	[0066.754] _swprintf (in: param_1=0x31b72a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.754] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.754] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.754] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b72a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c
	[0066.755] SetThreadPriority (hThread=0x43c, nPriority=15) returned 1
	[0066.756] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.756] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.756] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.756] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.756] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.756] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.757] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.757] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.757] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.757] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.762] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.762] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.762] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.762] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.762] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.762] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.762] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.762] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.762] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.762] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.762] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.773] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.773] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.774] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.774] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.774] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.774] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.774] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.775] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.775] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.776] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.776] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.777] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.777] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.777] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.777] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.777] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.777] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.777] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0066.777] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0066.777] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.777] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.777] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033") returned 26
	[0066.777] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.777] wcsstr (_Str="C:\\588bce7c90097ed212\\1033", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.777] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.797] _alloca_probe () returned 0x4036d0
	[0066.797] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1033", lpFilePart=0x318583c*="1033") returned 0x1a
	[0066.797] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30133c18, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0066.797] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.797] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30133c18, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.797] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.797] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30133c18, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30133c18, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.797] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.797] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.797] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.797] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.797] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.797] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.797] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.797] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.797] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.797] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.797] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.797] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.797] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.797] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.797] malloc (_Size=0x1000) returned 0x31b3060
	[0066.797] _swprintf (in: param_1=0x31b3060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\CoronaVirus.txt") returned 42
	[0066.797] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.797] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.797] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.797] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.798] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.798] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.799] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.799] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.800] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.800] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.800] malloc (_Size=0x1000) returned 0x31b4068
	[0066.800] _swprintf (in: param_1=0x31b4068, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0066.800] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.800] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.800] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b4068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x424
	[0066.801] SetThreadPriority (hThread=0x424, nPriority=15) returned 1
	[0066.802] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.802] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.802] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.802] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.802] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.802] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.804] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.804] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.804] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.804] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.804] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.804] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.804] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.804] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.804] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.804] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.804] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.804] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.805] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.806] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.806] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.806] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.806] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.806] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.806] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.806] malloc (_Size=0x1000) returned 0x31b82a8
	[0066.806] _swprintf (in: param_1=0x31b82a8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0066.806] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.806] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.806] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b82a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x428
	[0066.820] SetThreadPriority (hThread=0x428, nPriority=15) returned 1
	[0066.821] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.822] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.822] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.822] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.823] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.823] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.823] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.823] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.823] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.823] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.823] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.823] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.823] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.828] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.828] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.828] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.828] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.828] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.828] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.828] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.828] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.828] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.828] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.828] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.828] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.834] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.834] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.834] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.834] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.837] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.837] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.839] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.839] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.839] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.839] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.839] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.839] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.840] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.840] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.841] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.841] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.841] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.841] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0066.842] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1
	[0066.842] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.842] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.842] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035") returned 26
	[0066.842] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.842] wcsstr (_Str="C:\\588bce7c90097ed212\\1035", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.842] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.879] _alloca_probe () returned 0x4036d0
	[0066.879] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1035", lpFilePart=0x318583c*="1035") returned 0x1a
	[0066.879] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30218b32, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c120
	[0066.879] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.879] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30218b32, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.879] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.879] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301a6304, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x301a6304, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.879] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.879] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.879] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.879] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.879] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.879] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.880] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.880] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.880] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.880] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.880] malloc (_Size=0x1000) returned 0x31b4068
	[0066.880] _swprintf (in: param_1=0x31b4068, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\CoronaVirus.txt") returned 42
	[0066.880] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.880] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.880] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.880] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.880] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.880] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.881] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.881] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.882] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.882] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.882] malloc (_Size=0x1000) returned 0x31b92b0
	[0066.882] _swprintf (in: param_1=0x31b92b0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.882] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.882] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.882] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b92b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x448
	[0066.882] SetThreadPriority (hThread=0x448, nPriority=15) returned 1
	[0066.884] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.884] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.885] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0066.886] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.886] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0066.886] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.886] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0066.886] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.886] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0066.889] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.889] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0066.889] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.889] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0066.889] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.889] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0066.889] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.889] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0066.889] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.889] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0066.889] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.889] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0066.889] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.890] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0066.890] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0066.890] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0066.890] malloc (_Size=0x1000) returned 0x31b92b0
	[0066.890] _swprintf (in: param_1=0x31b92b0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0066.890] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0066.890] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0066.890] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0066.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b92b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c
	[0066.890] SetThreadPriority (hThread=0x44c, nPriority=15) returned 1
	[0066.892] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.892] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0066.892] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0066.892] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.892] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.892] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.892] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0066.892] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.892] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0066.903] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.904] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0066.904] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.907] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0066.907] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.908] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0066.908] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0066.909] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.909] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0066.910] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0066.910] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0066.910] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.911] FindClose (in: hFindFile=0x63c120 | out: hFindFile=0x63c120) returned 1
	[0066.911] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0066.911] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0066.911] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0066.911] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036") returned 26
	[0066.911] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0066.911] wcsstr (_Str="C:\\588bce7c90097ed212\\1036", _SubStr="Microsoft\\Windows") returned 0x0
	[0066.911] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0066.915] _alloca_probe () returned 0x4036d0
	[0066.915] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1036", lpFilePart=0x318583c*="1036") returned 0x1a
	[0066.915] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30264ec2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0066.916] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.916] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30264ec2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.916] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0066.916] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30264ec2, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30264ec2, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0066.916] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0066.916] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0066.916] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.916] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0066.916] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.916] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0066.916] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.916] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0066.916] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.916] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0066.916] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.916] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0066.916] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0066.916] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0066.916] malloc (_Size=0x1000) returned 0x31ba2b8
	[0066.916] _swprintf (in: param_1=0x31ba2b8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\CoronaVirus.txt") returned 42
	[0066.916] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0066.917] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0066.917] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0066.917] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0066.917] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.917] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0066.918] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.918] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0066.919] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.919] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0066.919] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.919] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0066.919] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.919] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0066.919] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0066.919] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0066.919] malloc (_Size=0x1000) returned 0x31bb2c0
	[0066.919] _swprintf (in: param_1=0x31bb2c0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.919] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0066.919] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\eula.rtf", _SubStr="wasse") returned 0x0
	[0066.919] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\eula.rtf", _SubStr="passw") returned 0x0
	[0066.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31bb2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x454
	[0066.919] SetThreadPriority (hThread=0x454, nPriority=15) returned 1
	[0066.921] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.921] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0066.922] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.260] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.260] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.260] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.261] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.261] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.261] malloc (_Size=0x1000) returned 0x31b0048
	[0067.261] _swprintf (in: param_1=0x31b0048, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0067.261] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.261] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.261] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b0048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x450
	[0067.262] SetThreadPriority (hThread=0x450, nPriority=15) returned 1
	[0067.263] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.263] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.263] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.263] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.263] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.263] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.264] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.264] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.264] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.264] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.264] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.264] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.264] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.264] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.264] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.264] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.264] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.270] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.275] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.275] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.275] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.276] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.276] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.277] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.277] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.282] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.282] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.283] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.284] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.284] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.284] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.284] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0067.284] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1
	[0067.284] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.284] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.284] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037") returned 26
	[0067.284] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.284] wcsstr (_Str="C:\\588bce7c90097ed212\\1037", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.284] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.288] _alloca_probe () returned 0x4036d0
	[0067.289] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1037", lpFilePart=0x318583c*="1037") returned 0x1a
	[0067.289] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x305f874d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0067.289] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.289] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x305f874d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.289] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.289] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305f874d, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x305f874d, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.289] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.289] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.289] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.289] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.289] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.289] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.289] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.289] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.289] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.289] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.289] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.289] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.289] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.289] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.289] malloc (_Size=0x1000) returned 0x31bb2c0
	[0067.289] _swprintf (in: param_1=0x31bb2c0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\CoronaVirus.txt") returned 42
	[0067.289] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.289] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.289] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.289] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.289] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.290] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.290] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.291] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.291] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.292] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.292] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.292] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.292] malloc (_Size=0x1000) returned 0x31b72a0
	[0067.292] _swprintf (in: param_1=0x31b72a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0067.292] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.292] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.292] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b72a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x430
	[0067.292] SetThreadPriority (hThread=0x430, nPriority=15) returned 1
	[0067.294] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.294] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.296] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.296] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.299] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.300] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.300] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.300] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.300] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.300] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.300] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.303] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.303] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.303] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.303] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.303] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.303] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.303] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.304] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.304] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.304] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.304] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.304] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.304] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.304] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.304] malloc (_Size=0x1000) returned 0x31b72a0
	[0067.304] _swprintf (in: param_1=0x31b72a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.304] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.304] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.304] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b72a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x440
	[0067.304] SetThreadPriority (hThread=0x440, nPriority=15) returned 1
	[0067.305] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.306] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.307] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.307] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.307] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.313] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.313] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.313] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.313] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.313] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.313] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.313] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.313] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.319] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.319] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.319] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.319] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.319] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.321] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.321] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.321] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.323] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.323] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.324] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.324] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.325] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.325] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.325] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0067.325] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1
	[0067.325] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.325] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.325] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038") returned 26
	[0067.325] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.325] wcsstr (_Str="C:\\588bce7c90097ed212\\1038", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.325] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.329] _alloca_probe () returned 0x4036d0
	[0067.329] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1038", lpFilePart=0x318583c*="1038") returned 0x1a
	[0067.329] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30644c29, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c120
	[0067.329] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.329] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30644c29, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.329] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.329] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30644c29, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30644c29, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.329] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.329] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.329] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.329] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.329] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.329] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.329] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.329] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.329] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.329] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.329] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.329] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.329] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.329] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.329] malloc (_Size=0x1000) returned 0x31b82a8
	[0067.329] _swprintf (in: param_1=0x31b82a8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\CoronaVirus.txt") returned 42
	[0067.330] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.330] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.330] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.330] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.330] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.330] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.330] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.330] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.330] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.330] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.330] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.330] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.330] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.330] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.330] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.330] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.330] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.331] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.331] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.332] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.332] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.332] malloc (_Size=0x1000) returned 0x31b92b0
	[0067.332] _swprintf (in: param_1=0x31b92b0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0067.332] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.332] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.332] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b92b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c
	[0067.333] SetThreadPriority (hThread=0x45c, nPriority=15) returned 1
	[0067.335] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.335] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.336] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.336] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.336] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.337] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.337] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.337] malloc (_Size=0x1000) returned 0x31bc2c8
	[0067.337] _swprintf (in: param_1=0x31bc2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0067.338] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.341] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.341] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31bc2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x460
	[0067.341] SetThreadPriority (hThread=0x460, nPriority=15) returned 1
	[0067.343] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.343] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.343] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.343] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.343] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.343] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.349] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.349] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.349] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.349] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.349] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.349] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.349] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.349] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.355] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.355] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.355] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.355] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.360] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.362] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.362] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.363] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.363] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.364] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.364] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.364] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.364] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.364] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.364] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.364] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.364] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.364] FindClose (in: hFindFile=0x63c120 | out: hFindFile=0x63c120) returned 1
	[0067.364] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1
	[0067.364] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.364] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.364] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040") returned 26
	[0067.364] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.364] wcsstr (_Str="C:\\588bce7c90097ed212\\1040", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.364] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.368] _alloca_probe () returned 0x4036d0
	[0067.368] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1040", lpFilePart=0x318583c*="1040") returned 0x1a
	[0067.369] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x306b72e3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0067.369] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.369] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x306b72e3, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.369] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.369] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306b72e3, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x306b72e3, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.369] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.369] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.369] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.369] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.369] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.369] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.369] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.369] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.369] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.369] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.369] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.369] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.369] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.369] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.369] malloc (_Size=0x1000) returned 0x31b92b0
	[0067.369] _swprintf (in: param_1=0x31b92b0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\CoronaVirus.txt") returned 42
	[0067.369] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.369] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.369] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.369] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.369] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.369] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.369] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.369] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.369] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.370] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.370] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.371] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.371] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.372] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.372] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.372] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.372] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.372] malloc (_Size=0x1000) returned 0x31bd2d0
	[0067.372] _swprintf (in: param_1=0x31bd2d0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0067.372] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.372] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.372] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31bd2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x468
	[0067.372] SetThreadPriority (hThread=0x468, nPriority=15) returned 1
	[0067.466] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.467] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.467] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.467] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.467] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.468] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.472] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.472] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.472] malloc (_Size=0x1000) returned 0x31b72a0
	[0067.472] _swprintf (in: param_1=0x31b72a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0067.472] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.472] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.472] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31b72a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x458
	[0067.473] SetThreadPriority (hThread=0x458, nPriority=15) returned 1
	[0067.475] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.475] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.475] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.475] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.475] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.475] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.475] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.475] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.475] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.475] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.481] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.481] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.481] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.481] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.481] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.481] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.481] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.481] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.491] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.492] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.492] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.494] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.496] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.496] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.497] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.497] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.498] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.498] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.498] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0067.498] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1
	[0067.498] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.498] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.498] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041") returned 26
	[0067.498] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.498] wcsstr (_Str="C:\\588bce7c90097ed212\\1041", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.498] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.502] _alloca_probe () returned 0x4036d0
	[0067.502] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1041", lpFilePart=0x318583c*="1041") returned 0x1a
	[0067.502] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x307e882c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0067.502] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.502] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x307e882c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.502] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.502] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307e882c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x307e882c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.502] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.502] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.502] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.502] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.502] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.502] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.502] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.502] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.502] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.502] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.502] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.502] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.502] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.502] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.502] malloc (_Size=0x1000) returned 0x31b0048
	[0067.502] _swprintf (in: param_1=0x31b0048, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\CoronaVirus.txt") returned 42
	[0067.502] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.502] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.503] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.503] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.503] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.503] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.504] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.504] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.505] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.505] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.505] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.505] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.505] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.505] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.505] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.505] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.505] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.505] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.505] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.505] malloc (_Size=0x1000) returned 0x31bc2c8
	[0067.505] _swprintf (in: param_1=0x31bc2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0067.505] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.505] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.505] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31bc2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x444
	[0067.505] SetThreadPriority (hThread=0x444, nPriority=15) returned 1
	[0067.507] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.507] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.507] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.507] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.507] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.507] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.507] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.510] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.510] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.510] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.510] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.510] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.510] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.510] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.510] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.510] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.510] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.510] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.510] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.511] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.511] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.511] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.511] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.511] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.511] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.511] malloc (_Size=0x1000) returned 0x31bd2d0
	[0067.511] _swprintf (in: param_1=0x31bd2d0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0067.511] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.511] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.511] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31bd2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x470
	[0067.511] SetThreadPriority (hThread=0x470, nPriority=15) returned 1
	[0067.513] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.513] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.513] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.513] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.513] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.513] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.513] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.513] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.513] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.513] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.513] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.513] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.513] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.513] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.513] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.513] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.513] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.514] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.519] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.519] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.519] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.519] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.520] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.520] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.520] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.520] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.520] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.520] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.520] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.520] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.520] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.520] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.527] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.527] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.528] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.528] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.529] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.529] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.529] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.529] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.529] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.529] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.529] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.529] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.529] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.529] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.533] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.533] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.533] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.533] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.533] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.533] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.533] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.533] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.533] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.533] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.533] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.533] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.533] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.534] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.534] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.534] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.535] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0067.535] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1
	[0067.535] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.535] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.535] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042") returned 26
	[0067.535] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.535] wcsstr (_Str="C:\\588bce7c90097ed212\\1042", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.535] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.538] _alloca_probe () returned 0x4036d0
	[0067.539] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1042", lpFilePart=0x318583c*="1042") returned 0x1a
	[0067.539] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3085ad4f, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0067.539] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.539] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3085ad4f, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.539] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.539] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3085ad4f, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3085ad4f, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.539] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.539] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.539] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.539] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.539] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.539] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.539] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.539] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.539] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.539] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.539] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.539] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.539] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.539] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.539] malloc (_Size=0x1000) returned 0x31bd2d0
	[0067.539] _swprintf (in: param_1=0x31bd2d0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\CoronaVirus.txt") returned 42
	[0067.539] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.539] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.539] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.539] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.539] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.539] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.540] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.540] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.541] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.541] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.542] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.542] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.542] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.542] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.542] malloc (_Size=0x1000) returned 0x31be2d8
	[0067.542] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0067.542] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.542] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.542] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31be2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474
	[0067.543] SetThreadPriority (hThread=0x474, nPriority=15) returned 1
	[0067.545] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.545] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.545] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.545] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.545] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.545] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.545] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.548] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.549] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.549] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.549] malloc (_Size=0x1000) returned 0x31bf2e0
	[0067.549] _swprintf (in: param_1=0x31bf2e0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0067.549] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.549] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.549] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31bf2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x478
	[0067.555] SetThreadPriority (hThread=0x478, nPriority=15) returned 1
	[0067.557] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.557] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.557] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.557] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.557] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.557] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.557] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.557] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.557] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.557] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.557] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.557] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.557] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.558] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.558] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.558] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.558] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.558] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.558] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.563] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.563] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.563] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.563] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.563] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.563] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.563] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.563] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.563] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.563] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.563] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.564] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.564] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.570] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.570] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.571] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.571] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.572] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.572] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.573] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.573] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.573] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.573] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0067.573] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1
	[0067.573] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.573] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.573] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043") returned 26
	[0067.573] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.573] wcsstr (_Str="C:\\588bce7c90097ed212\\1043", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.573] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.676] _alloca_probe () returned 0x4036d0
	[0067.676] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1043", lpFilePart=0x318583c*="1043") returned 0x1a
	[0067.676] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x309b2242, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0067.676] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.676] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x309b2242, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.676] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.676] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308a719c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x308a719c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.676] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.676] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.676] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.676] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.676] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.676] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.676] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.676] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.676] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.676] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.676] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.676] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.677] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.677] malloc (_Size=0x1000) returned 0x31b72a0
	[0067.677] _swprintf (in: param_1=0x31b72a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\CoronaVirus.txt") returned 42
	[0067.677] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.677] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.677] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.677] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.677] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.677] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.678] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.678] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.679] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.679] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.679] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.679] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.679] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.679] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.679] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.679] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.679] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.679] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.679] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.679] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.679] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.679] malloc (_Size=0x1000) returned 0x31be2d8
	[0067.679] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0067.679] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.679] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.679] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31be2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47c
	[0067.679] SetThreadPriority (hThread=0x47c, nPriority=15) returned 1
	[0067.681] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.681] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.684] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.685] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.688] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.688] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.688] malloc (_Size=0x1000) returned 0x31be2d8
	[0067.688] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0067.688] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.688] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.688] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31be2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x464
	[0067.689] SetThreadPriority (hThread=0x464, nPriority=15) returned 1
	[0067.691] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.691] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.691] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.691] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.691] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.697] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.697] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.703] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.703] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.703] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.707] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.709] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.709] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.710] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.710] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.711] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.711] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.711] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.711] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.711] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0067.711] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1
	[0067.711] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.711] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.711] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044") returned 26
	[0067.711] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.711] wcsstr (_Str="C:\\588bce7c90097ed212\\1044", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.711] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.717] _alloca_probe () returned 0x4036d0
	[0067.717] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1044", lpFilePart=0x318583c*="1044") returned 0x1a
	[0067.717] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x309fe76a, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c060
	[0067.717] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.717] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x309fe76a, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.717] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.717] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x309fe76a, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x309fe76a, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.717] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.717] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.717] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.717] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.717] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.717] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.717] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.717] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.717] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.717] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.717] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.717] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.717] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.717] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.717] malloc (_Size=0x1000) returned 0x31bf2e0
	[0067.718] _swprintf (in: param_1=0x31bf2e0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\CoronaVirus.txt") returned 42
	[0067.718] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.718] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.718] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.718] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.718] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.718] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.719] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.719] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.720] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.720] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.720] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.720] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.720] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.720] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.720] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.720] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.720] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.720] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.720] malloc (_Size=0x1000) returned 0x31c02e8
	[0067.720] _swprintf (in: param_1=0x31c02e8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0067.720] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.720] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.720] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c02e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484
	[0067.721] SetThreadPriority (hThread=0x484, nPriority=15) returned 1
	[0067.722] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.722] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.725] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.725] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.725] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.730] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.730] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.730] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.730] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.730] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.730] malloc (_Size=0x1000) returned 0x31c12f0
	[0067.730] _swprintf (in: param_1=0x31c12f0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0067.730] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.730] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.730] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c12f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48c
	[0067.731] SetThreadPriority (hThread=0x48c, nPriority=15) returned 1
	[0067.732] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.732] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.732] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.732] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.732] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.732] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.732] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.732] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.733] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.733] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.748] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.748] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.750] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.750] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.751] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.751] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.752] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.752] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.752] FindNextFileW (in: hFindFile=0x63c060, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.753] FindClose (in: hFindFile=0x63c060 | out: hFindFile=0x63c060) returned 1
	[0067.753] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1
	[0067.753] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.753] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.753] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045") returned 26
	[0067.753] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.753] wcsstr (_Str="C:\\588bce7c90097ed212\\1045", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.753] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.759] _alloca_probe () returned 0x4036d0
	[0067.759] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1045", lpFilePart=0x318583c*="1045") returned 0x1a
	[0067.759] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30a7100d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c0a0
	[0067.759] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.759] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30a7100d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.759] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.759] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30a7100d, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30a7100d, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.759] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.759] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.759] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.759] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.759] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.759] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.760] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.760] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.760] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.760] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.760] malloc (_Size=0x1000) returned 0x31c22f8
	[0067.760] _swprintf (in: param_1=0x31c22f8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\CoronaVirus.txt") returned 42
	[0067.760] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.760] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.760] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.760] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.760] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.760] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.760] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.760] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.760] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.760] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.761] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.761] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.762] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.762] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.762] malloc (_Size=0x1000) returned 0x31c3300
	[0067.762] _swprintf (in: param_1=0x31c3300, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0067.762] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.762] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.763] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c3300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x494
	[0067.763] SetThreadPriority (hThread=0x494, nPriority=15) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.958] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0067.958] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0067.958] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0067.958] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0067.958] malloc (_Size=0x1000) returned 0x31be2d8
	[0067.958] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.958] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0067.958] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0067.958] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0067.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31be2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x480
	[0067.959] SetThreadPriority (hThread=0x480, nPriority=15) returned 1
	[0067.961] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.961] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0067.961] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.961] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.961] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.961] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.961] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.961] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.961] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.961] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0067.961] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0067.967] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.967] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.987] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0067.987] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.988] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0067.988] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.989] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0067.989] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.989] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0067.989] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.989] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0067.989] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0067.989] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0067.989] FindNextFileW (in: hFindFile=0x63c0a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.989] FindClose (in: hFindFile=0x63c0a0 | out: hFindFile=0x63c0a0) returned 1
	[0067.989] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1
	[0067.989] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0067.989] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0067.989] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046") returned 26
	[0067.989] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0067.989] wcsstr (_Str="C:\\588bce7c90097ed212\\1046", _SubStr="Microsoft\\Windows") returned 0x0
	[0067.989] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0067.994] _alloca_probe () returned 0x4036d0
	[0067.995] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1046", lpFilePart=0x318583c*="1046") returned 0x1a
	[0067.995] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30cad386, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c0e0
	[0067.995] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.995] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30cad386, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.995] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0067.995] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30cad386, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30cad386, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0067.995] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0067.995] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0067.995] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.995] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0067.995] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.995] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0067.995] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.995] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0067.995] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.995] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0067.995] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.995] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0067.995] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0067.995] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0067.995] malloc (_Size=0x1000) returned 0x31c02e8
	[0067.995] _swprintf (in: param_1=0x31c02e8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\CoronaVirus.txt") returned 42
	[0067.995] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0067.995] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.995] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0067.995] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0067.995] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0067.996] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.996] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0067.997] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.997] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0067.998] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0067.998] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0067.998] malloc (_Size=0x1000) returned 0x31bc2c8
	[0067.998] _swprintf (in: param_1=0x31bc2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.998] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0067.998] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\eula.rtf", _SubStr="wasse") returned 0x0
	[0067.998] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\eula.rtf", _SubStr="passw") returned 0x0
	[0067.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31bc2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46c
	[0067.998] SetThreadPriority (hThread=0x46c, nPriority=15) returned 1
	[0068.000] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.000] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.000] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.000] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.000] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.000] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.002] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.002] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.002] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.002] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.002] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.002] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.002] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.002] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.003] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.003] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.003] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.003] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.003] malloc (_Size=0x1000) returned 0x31c3300
	[0068.003] _swprintf (in: param_1=0x31c3300, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0068.009] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.009] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.009] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c3300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498
	[0068.010] SetThreadPriority (hThread=0x498, nPriority=15) returned 1
	[0068.011] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.011] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.011] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.011] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.011] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.011] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.011] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.011] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.011] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.011] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.025] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.029] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.029] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.029] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.031] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.031] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.032] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.032] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.033] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.033] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.034] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.034] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.034] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.034] FindClose (in: hFindFile=0x63c0e0 | out: hFindFile=0x63c0e0) returned 1
	[0068.034] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1
	[0068.034] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0068.034] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0068.034] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049") returned 26
	[0068.034] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.034] wcsstr (_Str="C:\\588bce7c90097ed212\\1049", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.034] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.039] _alloca_probe () returned 0x4036d0
	[0068.039] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1049", lpFilePart=0x318583c*="1049") returned 0x1a
	[0068.039] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30d1fa95, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0068.039] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.040] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30d1fa95, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.040] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.040] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d1fa95, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30d1fa95, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.040] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.040] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.040] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.040] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.040] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.040] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.040] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.040] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.040] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.040] malloc (_Size=0x1000) returned 0x31bc2c8
	[0068.040] _swprintf (in: param_1=0x31bc2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\CoronaVirus.txt") returned 42
	[0068.040] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.040] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.040] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0068.040] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0068.040] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.040] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.040] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.040] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0068.040] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.040] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.041] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0068.041] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.042] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0068.042] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.043] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0068.043] malloc (_Size=0x1000) returned 0x31c4308
	[0068.043] _swprintf (in: param_1=0x31c4308, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0068.043] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0068.043] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\eula.rtf", _SubStr="wasse") returned 0x0
	[0068.043] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\eula.rtf", _SubStr="passw") returned 0x0
	[0068.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c4308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a0
	[0068.044] SetThreadPriority (hThread=0x4a0, nPriority=15) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.045] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.046] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.047] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.047] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.047] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.047] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.047] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.047] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.047] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.047] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.052] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.052] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.053] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.053] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.053] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.053] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.053] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.053] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.053] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.053] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.053] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.053] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.053] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.053] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.053] malloc (_Size=0x1000) returned 0x31c5310
	[0068.057] _swprintf (in: param_1=0x31c5310, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0068.058] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.058] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.058] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a8
	[0068.059] SetThreadPriority (hThread=0x4a8, nPriority=15) returned 1
	[0068.070] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.070] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.070] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.070] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.070] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.070] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.076] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.081] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.081] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.081] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.081] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.081] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.081] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.082] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.082] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.083] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.083] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.084] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.084] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.084] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.084] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0068.084] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1
	[0068.084] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0068.084] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0068.084] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053") returned 26
	[0068.084] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.084] wcsstr (_Str="C:\\588bce7c90097ed212\\1053", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.085] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.099] _alloca_probe () returned 0x4036d0
	[0068.099] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1053", lpFilePart=0x318583c*="1053") returned 0x1a
	[0068.100] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30db8267, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0068.100] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.100] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30db8267, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.100] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.100] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30db8267, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30db8267, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.100] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.100] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.100] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.100] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.100] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.100] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.100] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.100] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.100] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.100] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.100] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.100] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.100] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.100] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.100] malloc (_Size=0x1000) returned 0x31c12f0
	[0068.100] _swprintf (in: param_1=0x31c12f0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\CoronaVirus.txt") returned 42
	[0068.100] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.100] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.100] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0068.100] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.101] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0068.101] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0068.102] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.102] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0068.103] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.103] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0068.103] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.103] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0068.103] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.103] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0068.103] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.103] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0068.103] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.103] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0068.103] malloc (_Size=0x1000) returned 0x31c4308
	[0068.103] _swprintf (in: param_1=0x31c4308, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0068.103] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0068.103] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\eula.rtf", _SubStr="wasse") returned 0x0
	[0068.103] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\eula.rtf", _SubStr="passw") returned 0x0
	[0068.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c4308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x490
	[0068.103] SetThreadPriority (hThread=0x490, nPriority=15) returned 1
	[0068.105] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.105] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.105] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.105] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.109] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.110] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.110] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.110] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.110] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.110] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.110] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.110] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.110] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.110] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.110] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.110] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.110] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.110] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.110] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.114] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.114] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.114] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.114] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.114] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.114] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.114] malloc (_Size=0x1000) returned 0x31c4308
	[0068.114] _swprintf (in: param_1=0x31c4308, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0068.114] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.114] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.114] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c4308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0
	[0068.115] SetThreadPriority (hThread=0x4b0, nPriority=15) returned 1
	[0068.117] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.117] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.117] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.117] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.117] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.117] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.117] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.123] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.129] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.129] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.129] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.132] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.133] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.133] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.133] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.133] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.133] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.133] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.133] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.133] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.133] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.133] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.133] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.134] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.134] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.135] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.135] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.136] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.136] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.136] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.136] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0068.136] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1
	[0068.136] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0068.136] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0068.136] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055") returned 26
	[0068.136] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.136] wcsstr (_Str="C:\\588bce7c90097ed212\\1055", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.136] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.140] _alloca_probe () returned 0x4036d0
	[0068.140] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\1055", lpFilePart=0x318583c*="1055") returned 0x1a
	[0068.140] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30e0488a, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bee0
	[0068.141] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.141] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30e0488a, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.141] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.141] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30e0488a, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30e0488a, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.141] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.141] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.141] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.141] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.141] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.141] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.141] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.141] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.141] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.141] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.141] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.141] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.141] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.141] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.141] malloc (_Size=0x1000) returned 0x31c6538
	[0068.142] _swprintf (in: param_1=0x31c6538, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\CoronaVirus.txt") returned 42
	[0068.142] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.142] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.142] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0068.142] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0068.142] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.142] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0068.143] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.143] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0068.144] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.144] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0068.144] malloc (_Size=0x1000) returned 0x31c7540
	[0068.144] _swprintf (in: param_1=0x31c7540, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0068.145] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0068.145] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\eula.rtf", _SubStr="wasse") returned 0x0
	[0068.145] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\eula.rtf", _SubStr="passw") returned 0x0
	[0068.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c7540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b4
	[0068.145] SetThreadPriority (hThread=0x4b4, nPriority=15) returned 1
	[0068.147] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.147] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.147] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.147] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.147] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.147] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.149] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.149] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.150] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.150] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.150] malloc (_Size=0x1000) returned 0x31c8548
	[0068.153] _swprintf (in: param_1=0x31c8548, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0068.153] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.153] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.153] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c8548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b8
	[0068.154] SetThreadPriority (hThread=0x4b8, nPriority=15) returned 1
	[0068.155] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.155] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.155] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.155] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.155] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.155] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.155] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.155] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.155] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.155] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.155] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.161] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.161] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.161] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.167] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.170] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.170] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.171] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.171] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.172] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.172] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.173] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.173] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.174] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.174] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.174] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.174] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.174] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.174] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.174] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.174] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.174] FindClose (in: hFindFile=0x63bee0 | out: hFindFile=0x63bee0) returned 1
	[0068.174] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0068.174] wcsncmp (_String1="2", _String2=".", _MaxCount=0x1) returned 4
	[0068.174] wcsncmp (_String1="20", _String2="..", _MaxCount=0x2) returned 4
	[0068.174] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052") returned 26
	[0068.174] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.174] wcsstr (_Str="C:\\588bce7c90097ed212\\2052", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.174] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.184] _alloca_probe () returned 0x4036d0
	[0068.184] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\2052", lpFilePart=0x318583c*="2052") returned 0x1a
	[0068.184] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30e78888, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c0e0
	[0068.184] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.184] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30e78888, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.184] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.184] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30e78888, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30e78888, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.184] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.184] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.184] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.184] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.184] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.184] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.184] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.184] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.184] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.184] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.185] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.185] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.185] malloc (_Size=0x1000) returned 0x31c3300
	[0068.185] _swprintf (in: param_1=0x31c3300, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\CoronaVirus.txt") returned 42
	[0068.185] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.185] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.185] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0068.185] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0068.185] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.185] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0068.186] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.186] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0068.187] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.187] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0068.187] malloc (_Size=0x1000) returned 0x31c7540
	[0068.187] _swprintf (in: param_1=0x31c7540, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0068.187] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0068.187] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\eula.rtf", _SubStr="wasse") returned 0x0
	[0068.187] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\eula.rtf", _SubStr="passw") returned 0x0
	[0068.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c7540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49c
	[0068.188] SetThreadPriority (hThread=0x49c, nPriority=15) returned 1
	[0068.284] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.284] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.284] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.285] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.285] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.285] malloc (_Size=0x1000) returned 0x31be2d8
	[0068.285] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0068.285] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.285] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.285] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31be2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc
	[0068.286] SetThreadPriority (hThread=0x4bc, nPriority=15) returned 1
	[0068.287] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.287] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.287] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.287] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.287] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.287] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.288] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.288] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.288] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.288] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.288] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.293] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.293] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.293] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.301] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.301] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.302] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.302] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.303] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.303] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.304] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.304] FindNextFileW (in: hFindFile=0x63c0e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.304] FindClose (in: hFindFile=0x63c0e0 | out: hFindFile=0x63c0e0) returned 1
	[0068.304] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1
	[0068.304] wcsncmp (_String1="2", _String2=".", _MaxCount=0x1) returned 4
	[0068.304] wcsncmp (_String1="20", _String2="..", _MaxCount=0x2) returned 4
	[0068.304] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070") returned 26
	[0068.304] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.304] wcsstr (_Str="C:\\588bce7c90097ed212\\2070", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.304] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.307] _alloca_probe () returned 0x4036d0
	[0068.307] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\2070", lpFilePart=0x318583c*="2070") returned 0x1a
	[0068.307] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30fa8278, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0068.308] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.308] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x30fa8278, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.308] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.308] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30fa8278, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x30fa8278, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.308] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.308] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.308] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.308] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.308] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.308] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.308] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.308] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.308] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.308] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.308] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.308] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.308] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.308] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.308] malloc (_Size=0x1000) returned 0x31c4308
	[0068.308] _swprintf (in: param_1=0x31c4308, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\CoronaVirus.txt") returned 42
	[0068.308] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.308] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.308] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0068.308] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0068.308] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.308] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0068.308] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.308] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.309] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0068.309] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0068.310] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.310] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0068.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.311] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0068.311] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.311] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0068.311] malloc (_Size=0x1000) returned 0x31c5310
	[0068.311] _swprintf (in: param_1=0x31c5310, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.311] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0068.311] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\eula.rtf", _SubStr="wasse") returned 0x0
	[0068.311] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\eula.rtf", _SubStr="passw") returned 0x0
	[0068.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac
	[0068.311] SetThreadPriority (hThread=0x4ac, nPriority=15) returned 1
	[0068.312] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.313] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.313] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.313] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.313] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.313] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.314] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.315] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.315] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.315] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.315] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.315] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.315] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.315] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.315] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.316] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.316] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.316] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.316] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.316] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.316] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.316] malloc (_Size=0x1000) returned 0x31c8548
	[0068.316] _swprintf (in: param_1=0x31c8548, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.316] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.319] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.320] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c8548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x488
	[0068.320] SetThreadPriority (hThread=0x488, nPriority=15) returned 1
	[0068.328] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.342] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.342] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.342] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.342] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.343] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.343] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.344] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.344] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.345] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.345] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.346] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.346] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.346] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.346] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0068.347] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1
	[0068.347] wcsncmp (_String1="3", _String2=".", _MaxCount=0x1) returned 5
	[0068.347] wcsncmp (_String1="30", _String2="..", _MaxCount=0x2) returned 5
	[0068.347] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076") returned 26
	[0068.347] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.347] wcsstr (_Str="C:\\588bce7c90097ed212\\3076", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.347] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.355] _alloca_probe () returned 0x4036d0
	[0068.355] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\3076", lpFilePart=0x318583c*="3076") returned 0x1a
	[0068.355] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3101aa15, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0068.355] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.355] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3101aa15, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.355] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.355] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3101aa15, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3101aa15, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.355] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.355] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.356] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.356] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.356] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.356] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.356] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.356] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.356] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.356] malloc (_Size=0x1000) returned 0x31c7540
	[0068.356] _swprintf (in: param_1=0x31c7540, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\CoronaVirus.txt") returned 42
	[0068.356] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.356] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.356] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0068.356] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.356] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.356] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.356] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.356] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.356] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.356] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.356] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0068.356] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.357] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0068.357] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0068.358] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.358] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0068.359] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.359] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0068.359] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.359] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0068.359] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.359] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0068.359] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.359] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0068.359] malloc (_Size=0x1000) returned 0x31c5310
	[0068.359] _swprintf (in: param_1=0x31c5310, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.359] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0068.359] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\eula.rtf", _SubStr="wasse") returned 0x0
	[0068.359] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\eula.rtf", _SubStr="passw") returned 0x0
	[0068.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c0
	[0068.360] SetThreadPriority (hThread=0x4c0, nPriority=15) returned 1
	[0068.361] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.361] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.361] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.361] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.361] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.361] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.363] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.364] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.364] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.364] malloc (_Size=0x1000) returned 0x31c9550
	[0068.364] _swprintf (in: param_1=0x31c9550, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.364] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.364] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.364] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c9550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cc
	[0068.365] SetThreadPriority (hThread=0x4cc, nPriority=15) returned 1
	[0068.366] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.366] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.367] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.367] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.367] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.367] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.367] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.367] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.375] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.375] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.375] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.375] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.375] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.375] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.375] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.375] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.375] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.375] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.375] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.375] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.375] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.382] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.382] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.383] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.383] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.384] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.384] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.384] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.384] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0068.384] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0068.384] wcsncmp (_String1="3", _String2=".", _MaxCount=0x1) returned 5
	[0068.384] wcsncmp (_String1="30", _String2="..", _MaxCount=0x2) returned 5
	[0068.384] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082") returned 26
	[0068.384] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.384] wcsstr (_Str="C:\\588bce7c90097ed212\\3082", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.385] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.451] _alloca_probe () returned 0x4036d0
	[0068.451] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\3082", lpFilePart=0x318583c*="3082") returned 0x1a
	[0068.451] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x310ff5bc, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1e0
	[0068.451] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.451] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x310ff5bc, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.451] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.451] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31066c1f, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31066c1f, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.451] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.451] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.451] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.451] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.451] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.451] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.451] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.451] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.451] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.451] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.451] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.451] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.451] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.451] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.452] malloc (_Size=0x1000) returned 0x31c8548
	[0068.452] _swprintf (in: param_1=0x31c8548, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\CoronaVirus.txt") returned 42
	[0068.452] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.452] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.452] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0068.452] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.452] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0068.452] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0068.453] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.453] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0068.454] _wcslwr (in: _String=0x3185874 | out: _String=".rtf") returned=".rtf"
	[0068.454] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0068.454] malloc (_Size=0x1000) returned 0x31be2d8
	[0068.454] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.454] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0068.454] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\eula.rtf", _SubStr="wasse") returned 0x0
	[0068.454] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\eula.rtf", _SubStr="passw") returned 0x0
	[0068.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31be2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c4
	[0068.455] SetThreadPriority (hThread=0x4c4, nPriority=15) returned 1
	[0068.457] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.457] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0068.457] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0068.457] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.459] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.459] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.459] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.459] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.459] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.459] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.459] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.459] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.459] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.459] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.459] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.460] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.460] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.460] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.463] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.463] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.463] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.463] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.463] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.463] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.463] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.463] malloc (_Size=0x1000) returned 0x31be2d8
	[0068.463] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.463] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.463] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0068.463] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0068.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31be2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a4
	[0068.464] SetThreadPriority (hThread=0x4a4, nPriority=15) returned 1
	[0068.465] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.466] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.466] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.466] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.466] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.466] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.466] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.466] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.466] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.466] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.466] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.466] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.472] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.472] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.472] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.472] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.478] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.478] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.482] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.483] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.483] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.483] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.484] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.484] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.485] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.485] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.486] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.486] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.486] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.486] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.486] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.486] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.486] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.488] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.488] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.488] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.488] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.488] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.488] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.488] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.488] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.488] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.488] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.488] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.488] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.488] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.489] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.489] _wcslwr (in: _String=0x3185888 | out: _String=".dll") returned=".dll"
	[0068.489] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.489] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.489] FindClose (in: hFindFile=0x63c1e0 | out: hFindFile=0x63c1e0) returned 1
	[0068.489] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0068.489] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.489] wcsncmp (_String1="Cl", _String2="..", _MaxCount=0x2) returned 21
	[0068.489] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client") returned 28
	[0068.489] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.489] wcsstr (_Str="C:\\588bce7c90097ed212\\Client", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.489] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\client\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.492] _alloca_probe () returned 0x4036d0
	[0068.492] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\Client", lpFilePart=0x318583c*="Client") returned 0x1c
	[0068.492] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x31171e91, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0068.492] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.492] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x31171e91, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.492] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.492] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31171e91, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31171e91, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.492] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.492] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.492] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.492] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.492] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.492] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.492] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.492] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.492] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.492] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.492] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.492] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.492] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.492] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.492] malloc (_Size=0x1000) returned 0x31ca558
	[0068.493] _swprintf (in: param_1=0x31ca558, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\CoronaVirus.txt") returned 44
	[0068.493] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.493] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0068.493] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0068.493] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.493] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.493] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.494] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.494] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.494] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.494] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.494] malloc (_Size=0x1000) returned 0x31cb560
	[0068.494] _swprintf (in: param_1=0x31cb560, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.494] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.494] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", _SubStr="wasse") returned 0x0
	[0068.494] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", _SubStr="passw") returned 0x0
	[0068.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31cb560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d8
	[0068.494] SetThreadPriority (hThread=0x4d8, nPriority=15) returned 1
	[0068.496] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0068.496] wcsncmp (_String1="U", _String2=".", _MaxCount=0x1) returned 39
	[0068.496] wcsncmp (_String1="Ui", _String2="..", _MaxCount=0x2) returned 39
	[0068.496] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.496] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.496] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.496] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.496] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.496] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.496] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.496] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.505] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.511] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.511] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.511] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.511] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.511] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.511] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.511] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.511] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.511] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.511] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.511] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.511] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.511] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.511] malloc (_Size=0x1000) returned 0x31cc568
	[0068.548] _swprintf (in: param_1=0x31cc568, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.548] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.548] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", _SubStr="wasse") returned 0x0
	[0068.548] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", _SubStr="passw") returned 0x0
	[0068.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31cc568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dc
	[0068.549] SetThreadPriority (hThread=0x4dc, nPriority=15) returned 1
	[0068.551] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0068.551] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0068.551] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbb07f9, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x2fbb07f9, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.551] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.551] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.551] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0068.552] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.552] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0068.552] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.552] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0068.557] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.557] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0068.557] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.557] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0068.558] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.558] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0068.558] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.558] malloc (_Size=0x1000) returned 0x31cb560
	[0068.558] _swprintf (in: param_1=0x31cb560, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\CoronaVirus.txt") returned 37
	[0068.560] wcsstr (_Str="C:\\588bce7c90097ed212\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.560] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0068.560] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0068.560] wcsncmp (_String1="DH", _String2="..", _MaxCount=0x2) returned 22
	[0068.560] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0068.560] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0068.560] wcsncmp (_String1="Di", _String2="..", _MaxCount=0x2) returned 22
	[0068.560] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.560] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.560] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.561] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0068.561] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.561] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0068.567] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.567] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0068.567] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.567] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0068.567] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.567] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0068.567] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.567] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0068.567] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.567] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.568] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0068.568] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.569] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0068.569] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.570] _wcslwr (in: _String=0x3193afa | out: _String=".ico") returned=".ico"
	[0068.570] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0068.570] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1
	[0068.570] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0068.570] wcsncmp (_String1="Ex", _String2="..", _MaxCount=0x2) returned 23
	[0068.570] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended") returned 30
	[0068.570] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.570] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.570] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.572] _alloca_probe () returned 0x4036d0
	[0068.573] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\Extended", lpFilePart=0x318583c*="Extended") returned 0x1e
	[0068.573] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x31232973, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bea0
	[0068.573] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.573] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x31232973, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.573] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.573] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31232973, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31232973, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.573] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.573] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.573] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.573] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.573] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.573] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.573] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.573] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.573] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.573] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.573] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.573] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.573] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.573] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.573] malloc (_Size=0x1000) returned 0x31cc568
	[0068.573] _swprintf (in: param_1=0x31cc568, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\CoronaVirus.txt") returned 46
	[0068.573] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.574] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0068.574] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0068.574] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.574] _wcslwr (in: _String=0x3185886 | out: _String=".xml") returned=".xml"
	[0068.574] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.574] malloc (_Size=0x1000) returned 0x31cd570
	[0068.574] _swprintf (in: param_1=0x31cd570, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.574] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.574] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", _SubStr="wasse") returned 0x0
	[0068.574] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", _SubStr="passw") returned 0x0
	[0068.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31cd570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e4
	[0068.575] SetThreadPriority (hThread=0x4e4, nPriority=15) returned 1
	[0068.577] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0068.577] wcsncmp (_String1="U", _String2=".", _MaxCount=0x1) returned 39
	[0068.577] wcsncmp (_String1="Ui", _String2="..", _MaxCount=0x2) returned 39
	[0068.577] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.577] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0068.577] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.577] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0068.577] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.583] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0068.583] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.583] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0068.583] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.583] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0068.583] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.583] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0068.583] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.583] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0068.583] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.583] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0068.583] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.583] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0068.589] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.589] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0068.597] _wcslwr (in: _String=0x3185878 | out: _String=".xml") returned=".xml"
	[0068.597] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0068.597] malloc (_Size=0x1000) returned 0x31ce578
	[0068.598] _swprintf (in: param_1=0x31ce578, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.598] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.598] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", _SubStr="wasse") returned 0x0
	[0068.598] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", _SubStr="passw") returned 0x0
	[0068.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31ce578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e8
	[0068.598] SetThreadPriority (hThread=0x4e8, nPriority=15) returned 1
	[0068.638] FindNextFileW (in: hFindFile=0x63bea0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0068.638] FindClose (in: hFindFile=0x63bea0 | out: hFindFile=0x63bea0) returned 1
	[0068.638] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0068.638] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0068.638] wcsncmp (_String1="Gr", _String2="..", _MaxCount=0x2) returned 25
	[0068.638] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Graphics") returned 30
	[0068.638] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0068.638] wcsstr (_Str="C:\\588bce7c90097ed212\\Graphics", _SubStr="Microsoft\\Windows") returned 0x0
	[0068.638] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\graphics\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0068.643] _alloca_probe () returned 0x4036d0
	[0068.643] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics", lpFilePart=0x318583c*="Graphics") returned 0x1e
	[0068.644] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x312c9192, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0068.644] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.644] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x312c9192, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.644] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0068.644] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312c9192, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x312c9192, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0068.644] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0068.644] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0068.644] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.644] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0068.644] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.644] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0068.644] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.644] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0068.644] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.644] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0068.644] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.644] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0068.644] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0068.644] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0068.644] malloc (_Size=0x1000) returned 0x31be2d8
	[0068.644] _swprintf (in: param_1=0x31be2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Graphics\\CoronaVirus.txt") returned 46
	[0068.644] wcsstr (_Str="C:\\588bce7c90097ed212\\Graphics\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0068.644] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0068.644] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0068.644] wcsncmp (_String1="Pr", _String2="..", _MaxCount=0x2) returned 34
	[0068.644] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.644] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.644] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.645] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0068.645] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0068.646] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.646] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.647] _wcslwr (in: _String=0x3185876 | out: _String=".ico") returned=".ico"
	[0068.647] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0068.647] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0068.648] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.648] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.648] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0068.648] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.649] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0068.649] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0068.650] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.650] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0068.651] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0068.651] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.651] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.651] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0068.651] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0068.652] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.652] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.653] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0068.653] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0068.654] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0068.654] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.654] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0068.654] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.654] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0068.655] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.655] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0068.656] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.656] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0068.657] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0068.657] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.657] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.657] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0068.657] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.658] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0068.658] _wcslwr (in: _String=0x318587a | out: _String=".ico") returned=".ico"
	[0068.659] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0068.659] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.659] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0068.659] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.659] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0068.659] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.659] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0068.659] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.659] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0068.659] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.659] wcsncmp (_String1="Sa", _String2="..", _MaxCount=0x2) returned 37
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0068.659] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.659] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0068.659] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0068.659] wcsncmp (_String1="st", _String2="..", _MaxCount=0x2) returned 69
	[0068.659] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0068.659] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.659] wcsncmp (_String1="Sy", _String2="..", _MaxCount=0x2) returned 37
	[0068.660] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0068.660] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.660] wcsncmp (_String1="Sy", _String2="..", _MaxCount=0x2) returned 37
	[0068.660] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0068.660] wcsncmp (_String1="w", _String2=".", _MaxCount=0x1) returned 73
	[0068.660] wcsncmp (_String1="wa", _String2="..", _MaxCount=0x2) returned 73
	[0068.660] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0068.660] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0068.660] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0068.660] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0068.660] wcsncmp (_String1="he", _String2="..", _MaxCount=0x2) returned 58
	[0068.660] malloc (_Size=0x1000) returned 0x31c9550
	[0068.660] _swprintf (in: param_1=0x31c9550, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.660] wcsstr (_Str="C:\\588bce7c90097ed212\\header.bmp", _SubStr="CoronaVirus") returned 0x0
	[0068.660] wcsstr (_Str="C:\\588bce7c90097ed212\\header.bmp", _SubStr="wasse") returned 0x0
	[0068.660] wcsstr (_Str="C:\\588bce7c90097ed212\\header.bmp", _SubStr="passw") returned 0x0
	[0068.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c9550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0
	[0068.661] SetThreadPriority (hThread=0x4e0, nPriority=15) returned 1
	[0068.662] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0068.662] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0068.663] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0068.663] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.663] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0068.663] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.663] wcsstr (_Str=".bat", _SubStr=".mzz") returned 0x0
	[0068.663] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.663] wcsstr (_Str=".doc", _SubStr=".mzz") returned 0x0
	[0068.663] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.663] wcsstr (_Str=".jpg", _SubStr=".mzz") returned 0x0
	[0068.663] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.663] wcsstr (_Str=".jpe", _SubStr=".mzz") returned 0x0
	[0068.663] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.665] wcsstr (_Str=".txt", _SubStr=".mzz") returned 0x0
	[0068.665] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.665] wcsstr (_Str=".tex", _SubStr=".mzz") returned 0x0
	[0068.665] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.665] wcsstr (_Str=".dbf", _SubStr=".mzz") returned 0x0
	[0068.665] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.665] wcsstr (_Str=".xls", _SubStr=".mzz") returned 0x0
	[0068.665] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.665] wcsstr (_Str=".cry", _SubStr=".mzz") returned 0x0
	[0068.665] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.665] wcsstr (_Str=".xml", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".vsd", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".pdf", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".csv", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".bmp", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".tif", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".1cd", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".tax", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".gif", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".gbr", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".png", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".mdb", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".mdf", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".sdf", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".dwg", _SubStr=".mzz") returned 0x0
	[0068.666] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.666] wcsstr (_Str=".dxf", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".dgn", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".stl", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".gho", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".v2i", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".3ds", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".ppt", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".acc", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".vpd", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".odt", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".ods", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".rar", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".zip", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".cpp", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".pas", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".asm", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".rtf", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".lic", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.667] wcsstr (_Str=".avi", _SubStr=".mzz") returned 0x0
	[0068.667] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".mov", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".mp3", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".vbs", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".v8i", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".erf", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".epf", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".mxl", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".cfu", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".mht", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193af8 | out: _String=".mzz") returned=".mzz"
	[0068.668] wcsstr (_Str=".old", _SubStr=".mzz") returned 0x0
	[0068.668] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0068.668] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0068.668] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0068.668] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.668] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.668] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.668] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.668] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.668] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0068.668] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0068.669] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.669] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0068.670] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.670] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0068.671] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0068.671] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0068.671] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0068.671] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.671] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.672] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0068.672] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.673] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0068.673] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.674] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.674] _wcslwr (in: _String=0x3193b00 | out: _String=".msi") returned=".msi"
	[0068.675] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0068.675] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0068.675] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0068.675] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".bat", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".doc", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".jpg", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".jpe", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".txt", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".tex", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".dbf", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".xls", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".cry", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".xml", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".vsd", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".pdf", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".csv", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.675] wcsstr (_Str=".bmp", _SubStr=".mzz") returned 0x0
	[0068.675] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".tif", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".1cd", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".tax", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".gif", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".gbr", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".png", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".mdb", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".mdf", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".sdf", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".dwg", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".dxf", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".dgn", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".stl", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".gho", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".v2i", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".3ds", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".ppt", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".acc", _SubStr=".mzz") returned 0x0
	[0068.676] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.676] wcsstr (_Str=".vpd", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".odt", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".ods", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".rar", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".zip", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".cpp", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".pas", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".asm", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".rtf", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".lic", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".avi", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".mov", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".mp3", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".vbs", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".v8i", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".erf", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".epf", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".mxl", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".cfu", _SubStr=".mzz") returned 0x0
	[0068.677] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.677] wcsstr (_Str=".mht", _SubStr=".mzz") returned 0x0
	[0068.678] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.678] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0068.678] _wcslwr (in: _String=0x3193b00 | out: _String=".mzz") returned=".mzz"
	[0068.678] wcsstr (_Str=".old", _SubStr=".mzz") returned 0x0
	[0068.678] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0068.692] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0068.692] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0068.692] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.692] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.692] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.692] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0068.692] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.692] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0068.696] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.696] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0068.696] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.696] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0068.696] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.696] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0068.696] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.696] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0068.696] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.696] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.697] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0068.697] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.698] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0068.698] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.698] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0068.698] _wcslwr (in: _String=0x3193b08 | out: _String=".msi") returned=".msi"
	[0068.698] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0068.698] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0068.698] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0068.698] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0068.698] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0068.698] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0068.698] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0068.698] malloc (_Size=0x1000) returned 0x31c5310
	[0068.698] _swprintf (in: param_1=0x31c5310, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.698] wcsstr (_Str="C:\\588bce7c90097ed212\\ParameterInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0068.698] wcsstr (_Str="C:\\588bce7c90097ed212\\ParameterInfo.xml", _SubStr="wasse") returned 0x0
	[0068.698] wcsstr (_Str="C:\\588bce7c90097ed212\\ParameterInfo.xml", _SubStr="passw") returned 0x0
	[0068.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec
	[0068.699] SetThreadPriority (hThread=0x4ec, nPriority=15) returned 1
	[0068.700] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0068.700] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.701] wcsncmp (_String1="RG", _String2="..", _MaxCount=0x2) returned 36
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0068.701] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.701] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0068.707] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.707] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0068.707] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.707] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0068.707] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.707] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0068.707] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.707] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0068.707] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.708] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0068.713] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.713] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0068.713] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.713] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0068.713] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.713] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0068.713] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.713] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0068.713] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.713] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0068.713] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.713] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0068.713] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.714] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0068.714] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.714] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0068.725] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.753] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0068.753] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.753] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0068.753] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.754] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0068.754] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.754] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0068.754] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.754] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0068.762] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.762] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0068.763] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0068.763] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0068.763] wcsncmp (_String1="RG", _String2="..", _MaxCount=0x2) returned 36
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.763] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.763] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0068.764] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.764] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.765] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0068.765] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0068.766] _wcslwr (in: _String=0x3193afc | out: _String=".msi") returned=".msi"
	[0068.766] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0068.766] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0068.766] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.766] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".bat", _SubStr=".exe") returned 0x0
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".doc", _SubStr=".exe") returned 0x0
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".jpg", _SubStr=".exe") returned 0x0
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".jpe", _SubStr=".exe") returned 0x0
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".txt", _SubStr=".exe") returned 0x0
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".tex", _SubStr=".exe") returned 0x0
	[0068.767] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.767] wcsstr (_Str=".dbf", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".xls", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".cry", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".xml", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".vsd", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".pdf", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".csv", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".bmp", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".tif", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".1cd", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".tax", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.768] wcsstr (_Str=".gif", _SubStr=".exe") returned 0x0
	[0068.768] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".gbr", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".png", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".mdb", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".mdf", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".sdf", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".dwg", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".dxf", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".dgn", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".stl", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".gho", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".v2i", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".3ds", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".ppt", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".acc", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".vpd", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".odt", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".ods", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".rar", _SubStr=".exe") returned 0x0
	[0068.769] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.769] wcsstr (_Str=".zip", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".cpp", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".pas", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".asm", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".rtf", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".lic", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".avi", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".mov", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".mp3", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".vbs", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".v8i", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".erf", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".epf", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".mxl", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".cfu", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".mht", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0068.770] _wcslwr (in: _String=0x3193aee | out: _String=".exe") returned=".exe"
	[0068.770] wcsstr (_Str=".old", _SubStr=".exe") returned 0x0
	[0068.770] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0068.770] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.770] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.771] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.771] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0068.772] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.772] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.773] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.773] _wcslwr (in: _String=0x3193afa | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0068.774] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0068.774] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.774] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0068.774] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.774] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0068.775] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0068.775] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0068.775] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0068.775] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.775] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.775] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0068.775] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.775] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0068.776] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0068.776] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0068.776] wcsncmp (_String1="Sp", _String2="..", _MaxCount=0x2) returned 37
	[0068.776] malloc (_Size=0x1000) returned 0x31c5310
	[0068.776] _swprintf (in: param_1=0x31c5310, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.776] wcsstr (_Str="C:\\588bce7c90097ed212\\SplashScreen.bmp", _SubStr="CoronaVirus") returned 0x0
	[0068.776] wcsstr (_Str="C:\\588bce7c90097ed212\\SplashScreen.bmp", _SubStr="wasse") returned 0x0
	[0068.776] wcsstr (_Str="C:\\588bce7c90097ed212\\SplashScreen.bmp", _SubStr="passw") returned 0x0
	[0068.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31c5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230
	[0068.776] SetThreadPriority (hThread=0x230, nPriority=15) returned 1
	[0068.778] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0068.778] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0068.778] wcsncmp (_String1="sq", _String2="..", _MaxCount=0x2) returned 69
	[0068.778] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0068.778] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0068.778] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0068.778] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0068.778] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0068.778] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0068.778] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0068.778] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0068.778] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0068.778] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0068.778] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0068.778] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0068.778] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.008] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0069.008] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.008] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0069.008] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.008] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0069.008] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.008] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0069.008] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.008] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0069.008] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0069.009] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.009] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0069.010] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.010] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.011] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.011] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.011] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.011] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.011] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af0 | out: _String=".dll") returned=".dll"
	[0069.011] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0069.011] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0069.011] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0069.011] wcsncmp (_String1="St", _String2="..", _MaxCount=0x2) returned 37
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.011] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.011] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.011] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.011] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.011] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.011] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.011] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0069.011] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.012] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0069.012] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.012] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0069.013] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.013] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0069.013] _wcslwr (in: _String=0x3193af2 | out: _String=".xml") returned=".xml"
	[0069.013] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0069.013] malloc (_Size=0x1000) returned 0x31cd570
	[0069.013] _swprintf (in: param_1=0x31cd570, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0069.013] wcsstr (_Str="C:\\588bce7c90097ed212\\Strings.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.013] wcsstr (_Str="C:\\588bce7c90097ed212\\Strings.xml", _SubStr="wasse") returned 0x0
	[0069.013] wcsstr (_Str="C:\\588bce7c90097ed212\\Strings.xml", _SubStr="passw") returned 0x0
	[0069.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31cd570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c8
	[0069.013] SetThreadPriority (hThread=0x4c8, nPriority=15) returned 1
	[0069.016] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0069.016] wcsncmp (_String1="U", _String2=".", _MaxCount=0x1) returned 39
	[0069.016] wcsncmp (_String1="Ui", _String2="..", _MaxCount=0x2) returned 39
	[0069.016] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.016] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0069.016] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.016] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0069.016] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.016] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0069.016] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.016] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0069.021] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.021] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0069.021] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.021] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0069.021] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.021] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0069.021] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.021] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0069.021] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.021] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0069.021] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.021] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0069.021] _wcslwr (in: _String=0x3193af0 | out: _String=".xml") returned=".xml"
	[0069.021] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0069.021] malloc (_Size=0x1000) returned 0x31ce578
	[0069.021] _swprintf (in: param_1=0x31ce578, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.021] wcsstr (_Str="C:\\588bce7c90097ed212\\UiInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.021] wcsstr (_Str="C:\\588bce7c90097ed212\\UiInfo.xml", _SubStr="wasse") returned 0x0
	[0069.021] wcsstr (_Str="C:\\588bce7c90097ed212\\UiInfo.xml", _SubStr="passw") returned 0x0
	[0069.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31ce578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f4
	[0069.022] SetThreadPriority (hThread=0x4f4, nPriority=15) returned 1
	[0069.023] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0069.023] wcsncmp (_String1="w", _String2=".", _MaxCount=0x1) returned 73
	[0069.023] wcsncmp (_String1="wa", _String2="..", _MaxCount=0x2) returned 73
	[0069.023] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.023] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0069.023] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.023] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0069.024] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.024] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0069.024] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.024] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0069.024] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.024] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0069.024] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.024] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0069.024] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.024] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0069.030] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.030] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0069.030] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.030] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0069.030] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.030] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0069.030] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.030] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0069.030] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.032] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0069.033] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.033] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0069.033] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.033] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0069.033] _wcslwr (in: _String=0x3193af6 | out: _String=".bmp") returned=".bmp"
	[0069.033] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0069.033] malloc (_Size=0x1000) returned 0x31cf580
	[0069.033] _swprintf (in: param_1=0x31cf580, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.033] wcsstr (_Str="C:\\588bce7c90097ed212\\watermark.bmp", _SubStr="CoronaVirus") returned 0x0
	[0069.033] wcsstr (_Str="C:\\588bce7c90097ed212\\watermark.bmp", _SubStr="wasse") returned 0x0
	[0069.033] wcsstr (_Str="C:\\588bce7c90097ed212\\watermark.bmp", _SubStr="passw") returned 0x0
	[0069.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31cf580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fc
	[0069.034] SetThreadPriority (hThread=0x4fc, nPriority=15) returned 1
	[0069.035] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0069.035] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0069.035] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0069.035] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.035] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.035] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.035] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0069.035] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.035] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0069.035] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.035] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0069.035] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.035] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0069.035] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.036] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0069.036] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.036] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0069.036] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.041] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0069.041] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.041] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0069.041] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.041] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0069.041] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.041] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0069.041] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.041] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0069.041] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.042] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0069.042] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.042] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0069.042] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.042] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0069.047] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.047] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0069.047] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.047] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0069.047] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.047] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0069.047] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.047] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0069.047] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.047] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0069.048] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.048] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0069.048] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.048] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0069.048] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.048] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0069.048] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.048] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0069.048] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.056] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0069.058] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.058] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.059] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.059] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0069.059] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0069.059] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0069.059] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0069.060] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.060] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0069.061] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.061] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0069.062] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.062] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0069.063] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0069.063] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0069.063] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0069.063] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.063] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0069.064] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.064] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0069.064] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.064] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0069.064] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.064] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0069.064] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.064] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0069.064] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.064] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0069.106] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.106] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.107] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0069.107] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0069.108] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0069.108] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0069.108] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.108] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0069.108] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0069.109] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.109] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.110] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0069.110] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0069.111] _wcslwr (in: _String=0x3193b1e | out: _String=".msu") returned=".msu"
	[0069.111] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0069.111] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0069.111] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.111] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0069.111] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.111] wcsncmp (_String1="Bo", _String2="..", _MaxCount=0x2) returned 20
	[0069.111] _swprintf (in: param_1=0x31a1f80, param_2="%s\\%s" | out: param_1="C:\\Boot") returned 7
	[0069.111] wcsncmp (_String1="C:\\Boot", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.111] wcsstr (_Str="C:\\Boot", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.112] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\CoronaVirus.txt" (normalized: "c:\\boot\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.116] _alloca_probe () returned 0x4036d0
	[0069.116] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x1000, lpBuffer=0x319bd08, lpFilePart=0x3193ab4 | out: lpBuffer="C:\\Boot", lpFilePart=0x3193ab4*="Boot") returned 0x7
	[0069.116] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31767d4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1e0
	[0069.116] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.116] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31767d4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.118] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.118] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0069.118] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.118] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0069.118] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0069.118] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.118] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0069.118] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.118] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0069.119] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.119] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.120] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0069.120] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0069.121] _wcslwr (in: _String=0x3193aea | out: _String=".log") returned=".log"
	[0069.121] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0069.121] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0069.121] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.121] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0069.121] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0069.121] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.121] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0069.121] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0069.121] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.121] wcsncmp (_String1="bg", _String2="..", _MaxCount=0x2) returned 52
	[0069.121] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\bg-BG") returned 13
	[0069.121] wcsncmp (_String1="C:\\Boot\\b", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.121] wcsstr (_Str="C:\\Boot\\bg-BG", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.121] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\bg-BG\\CoronaVirus.txt" (normalized: "c:\\boot\\bg-bg\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.124] _alloca_probe () returned 0x4036d0
	[0069.124] GetFullPathNameW (in: lpFileName="C:\\Boot\\bg-BG", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\bg-BG", lpFilePart=0x318583c*="bg-BG") returned 0xd
	[0069.124] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31767d4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.124] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.124] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31767d4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.124] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.124] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.124] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.124] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.124] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.124] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.124] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.124] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.124] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.124] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.124] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.124] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.125] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.125] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.126] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.126] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.127] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.127] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31767d4c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31767d4c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.127] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.127] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.127] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.127] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.127] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.127] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.128] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.128] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.128] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.128] malloc (_Size=0x1000) returned 0x31c9550
	[0069.128] _swprintf (in: param_1=0x31c9550, param_2="%s\\%s" | out: param_1="C:\\Boot\\bg-BG\\CoronaVirus.txt") returned 29
	[0069.128] wcsstr (_Str="C:\\Boot\\bg-BG\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.128] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31767d4c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31767d4c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.128] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.128] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0069.128] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.128] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0069.128] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.128] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.129] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0069.129] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0069.130] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.130] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af8 | out: _String=".dll") returned=".dll"
	[0069.131] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0069.131] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0069.131] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.131] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0069.131] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.131] wcsstr (_Str=".bak", _SubStr=".dat") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.131] wcsstr (_Str=".bat", _SubStr=".dat") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.131] wcsstr (_Str=".doc", _SubStr=".dat") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.131] wcsstr (_Str=".jpg", _SubStr=".dat") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.131] wcsstr (_Str=".jpe", _SubStr=".dat") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.131] wcsstr (_Str=".txt", _SubStr=".dat") returned 0x0
	[0069.131] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".tex", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".dbf", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".xls", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".cry", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".xml", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".vsd", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".pdf", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".csv", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".bmp", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".tif", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".1cd", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".tax", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".gif", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".gbr", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".png", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".mdb", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".mdf", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.132] wcsstr (_Str=".sdf", _SubStr=".dat") returned 0x0
	[0069.132] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".dwg", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".dxf", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".dgn", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".stl", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".gho", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".v2i", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".3ds", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".ppt", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".acc", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".vpd", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".odt", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".ods", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".rar", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".zip", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".cpp", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".pas", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".asm", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".rtf", _SubStr=".dat") returned 0x0
	[0069.133] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.133] wcsstr (_Str=".lic", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".avi", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".mov", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".mp3", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".vbs", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".v8i", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".erf", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".epf", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".mxl", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".cfu", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".mht", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".bak", _SubStr=".dat") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af4 | out: _String=".dat") returned=".dat"
	[0069.134] wcsstr (_Str=".old", _SubStr=".dat") returned 0x0
	[0069.134] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0069.134] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.134] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.134] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.134] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.134] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.134] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.134] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0069.134] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0069.135] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.135] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0069.136] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.136] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193af2 | out: _String=".dll") returned=".dll"
	[0069.137] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0069.137] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31767d4c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31767d4c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.137] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.137] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.137] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0069.137] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.137] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0069.138] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.138] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0069.138] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.138] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0069.138] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.138] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0069.138] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.138] _wcslwr (in: _String=0x3193afa | out: _String=".txt") returned=".txt"
	[0069.138] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.138] malloc (_Size=0x1000) returned 0x31c5310
	[0069.138] _swprintf (in: param_1=0x31c5310, param_2="%s\\%s" | out: param_1="C:\\Boot\\CoronaVirus.txt") returned 23
	[0069.138] wcsstr (_Str="C:\\Boot\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.138] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0069.138] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0069.138] wcsncmp (_String1="cs", _String2="..", _MaxCount=0x2) returned 53
	[0069.138] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\cs-CZ") returned 13
	[0069.138] wcsncmp (_String1="C:\\Boot\\c", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.138] wcsstr (_Str="C:\\Boot\\cs-CZ", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.138] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\cs-CZ\\CoronaVirus.txt" (normalized: "c:\\boot\\cs-cz\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.141] _alloca_probe () returned 0x4036d0
	[0069.141] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x318583c*="cs-CZ") returned 0xd
	[0069.141] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x3178df7d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.141] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.141] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x3178df7d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.141] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.141] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.141] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.141] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.141] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.141] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.141] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.141] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.141] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.141] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.141] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.141] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.141] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.141] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.141] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.141] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.141] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.141] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.142] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.142] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.150] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.150] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.151] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.151] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.152] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.152] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3178df7d, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3178df7d, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.152] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.152] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.152] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.152] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.152] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.152] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.152] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.152] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.152] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.152] malloc (_Size=0x1000) returned 0x31cd570
	[0069.152] _swprintf (in: param_1=0x31cd570, param_2="%s\\%s" | out: param_1="C:\\Boot\\cs-CZ\\CoronaVirus.txt") returned 29
	[0069.152] wcsstr (_Str="C:\\Boot\\cs-CZ\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.153] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.153] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.153] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.153] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.153] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.154] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.154] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.155] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.155] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.156] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.156] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.156] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.156] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.156] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.156] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.156] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0069.156] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0069.156] wcsncmp (_String1="da", _String2="..", _MaxCount=0x2) returned 54
	[0069.156] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\da-DK") returned 13
	[0069.156] wcsncmp (_String1="C:\\Boot\\d", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.156] wcsstr (_Str="C:\\Boot\\da-DK", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.156] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\da-DK\\CoronaVirus.txt" (normalized: "c:\\boot\\da-dk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.159] _alloca_probe () returned 0x4036d0
	[0069.159] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x318583c*="da-DK") returned 0xd
	[0069.159] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x317b4170, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0069.159] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.159] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x317b4170, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.159] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.159] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.159] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.159] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.159] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.159] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.160] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.160] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.161] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.161] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.162] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.162] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.162] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317b4170, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x317b4170, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.162] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.163] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.163] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.163] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.163] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.163] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.163] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.163] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.163] malloc (_Size=0x1000) returned 0x31ce578
	[0069.163] _swprintf (in: param_1=0x31ce578, param_2="%s\\%s" | out: param_1="C:\\Boot\\da-DK\\CoronaVirus.txt") returned 29
	[0069.163] wcsstr (_Str="C:\\Boot\\da-DK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.163] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.163] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.163] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.163] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.163] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.163] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.163] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.163] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.163] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.163] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.163] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.164] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.164] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.165] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.165] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.166] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.166] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.166] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.166] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0069.166] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0069.166] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0069.166] wcsncmp (_String1="de", _String2="..", _MaxCount=0x2) returned 54
	[0069.166] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\de-DE") returned 13
	[0069.166] wcsncmp (_String1="C:\\Boot\\d", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.166] wcsstr (_Str="C:\\Boot\\de-DE", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.166] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\de-DE\\CoronaVirus.txt" (normalized: "c:\\boot\\de-de\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.168] _alloca_probe () returned 0x4036d0
	[0069.169] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x318583c*="de-DE") returned 0xd
	[0069.169] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x317da1e4, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0069.169] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.169] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x317da1e4, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.169] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.169] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.169] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.169] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.169] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.169] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.170] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.170] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.171] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.171] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.172] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.172] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.172] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.172] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.172] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.172] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.172] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.172] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317da1e4, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x317da1e4, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.172] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.172] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.172] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.172] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.172] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.172] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.172] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.172] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.172] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.172] malloc (_Size=0x1000) returned 0x31cf580
	[0069.172] _swprintf (in: param_1=0x31cf580, param_2="%s\\%s" | out: param_1="C:\\Boot\\de-DE\\CoronaVirus.txt") returned 29
	[0069.172] wcsstr (_Str="C:\\Boot\\de-DE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.172] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.173] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.173] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.173] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.173] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.174] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.174] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.175] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.175] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.176] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.176] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.176] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.176] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.176] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.176] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.176] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.176] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.176] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.176] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.176] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.176] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0069.176] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0069.176] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0069.176] wcsncmp (_String1="el", _String2="..", _MaxCount=0x2) returned 55
	[0069.176] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\el-GR") returned 13
	[0069.176] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.176] wcsstr (_Str="C:\\Boot\\el-GR", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.176] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\el-GR\\CoronaVirus.txt" (normalized: "c:\\boot\\el-gr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.178] _alloca_probe () returned 0x4036d0
	[0069.179] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x318583c*="el-GR") returned 0xd
	[0069.179] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31800788, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bf20
	[0069.179] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.179] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31800788, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.179] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.179] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.179] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.179] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.179] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.179] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.180] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.180] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.181] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.181] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.182] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.182] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.182] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.182] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.182] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.182] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.182] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.182] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31800788, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31800788, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.182] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.182] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.182] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.182] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.182] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.182] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.182] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.182] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.182] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.182] malloc (_Size=0x1000) returned 0x31d0588
	[0069.183] _swprintf (in: param_1=0x31d0588, param_2="%s\\%s" | out: param_1="C:\\Boot\\el-GR\\CoronaVirus.txt") returned 29
	[0069.183] wcsstr (_Str="C:\\Boot\\el-GR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.183] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.183] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.183] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.183] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.183] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.184] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.184] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.185] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.185] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.186] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.186] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.186] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.186] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.186] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.186] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.186] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.186] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.186] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.186] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.186] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.186] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.186] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.186] FindClose (in: hFindFile=0x63bf20 | out: hFindFile=0x63bf20) returned 1
	[0069.186] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0069.186] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0069.186] wcsncmp (_String1="en", _String2="..", _MaxCount=0x2) returned 55
	[0069.186] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-GB") returned 13
	[0069.186] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.186] wcsstr (_Str="C:\\Boot\\en-GB", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.186] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\en-GB\\CoronaVirus.txt" (normalized: "c:\\boot\\en-gb\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.211] _alloca_probe () returned 0x4036d0
	[0069.211] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-GB", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\en-GB", lpFilePart=0x318583c*="en-GB") returned 0xd
	[0069.211] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x3184cb75, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.211] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.211] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x3184cb75, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.211] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.211] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.211] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.211] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.211] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.211] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.211] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.211] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.211] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.212] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.212] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.213] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.213] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.214] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.214] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3184cb75, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3184cb75, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.214] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.214] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.214] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.214] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.214] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.215] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.215] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.215] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.215] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.215] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.215] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.215] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.215] malloc (_Size=0x1000) returned 0x31d1590
	[0069.215] _swprintf (in: param_1=0x31d1590, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-GB\\CoronaVirus.txt") returned 29
	[0069.215] wcsstr (_Str="C:\\Boot\\en-GB\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.215] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3184cb75, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3184cb75, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.215] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.215] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0069.215] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0069.215] wcsncmp (_String1="en", _String2="..", _MaxCount=0x2) returned 55
	[0069.215] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-US") returned 13
	[0069.215] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.215] wcsstr (_Str="C:\\Boot\\en-US", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.215] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\en-US\\CoronaVirus.txt" (normalized: "c:\\boot\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.224] _alloca_probe () returned 0x4036d0
	[0069.224] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x318583c*="en-US") returned 0xd
	[0069.224] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31872d44, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.224] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.224] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31872d44, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.224] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.224] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.224] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.224] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.224] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.224] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.225] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.225] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.226] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.226] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.227] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.227] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31872d44, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31872d44, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.227] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.227] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.227] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.227] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.227] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.227] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.227] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.227] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.227] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.227] malloc (_Size=0x1000) returned 0x31d2598
	[0069.228] _swprintf (in: param_1=0x31d2598, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-US\\CoronaVirus.txt") returned 29
	[0069.228] wcsstr (_Str="C:\\Boot\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.228] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.228] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.228] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.228] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.228] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.229] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.229] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.230] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.230] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.231] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.231] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.231] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.231] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.231] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.231] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.231] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.231] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.231] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.231] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0069.231] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0069.231] wcsncmp (_String1="es", _String2="..", _MaxCount=0x2) returned 55
	[0069.231] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-ES") returned 13
	[0069.231] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.231] wcsstr (_Str="C:\\Boot\\es-ES", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.231] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\es-ES\\CoronaVirus.txt" (normalized: "c:\\boot\\es-es\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.233] _alloca_probe () returned 0x4036d0
	[0069.234] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x318583c*="es-ES") returned 0xd
	[0069.234] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31872d44, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.234] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.234] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31872d44, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.234] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.234] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.234] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.234] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.234] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.234] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.235] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.235] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.236] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.236] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.237] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.237] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31872d44, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31872d44, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.237] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.237] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.237] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.237] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.237] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.237] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.237] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.237] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.237] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.237] malloc (_Size=0x1000) returned 0x31d35a0
	[0069.237] _swprintf (in: param_1=0x31d35a0, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-ES\\CoronaVirus.txt") returned 29
	[0069.238] wcsstr (_Str="C:\\Boot\\es-ES\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.238] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.238] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.238] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.238] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.238] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.239] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.239] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.240] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.240] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.240] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.241] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.241] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0069.241] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0069.241] wcsncmp (_String1="es", _String2="..", _MaxCount=0x2) returned 55
	[0069.241] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-MX") returned 13
	[0069.241] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.241] wcsstr (_Str="C:\\Boot\\es-MX", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.241] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\es-MX\\CoronaVirus.txt" (normalized: "c:\\boot\\es-mx\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.244] _alloca_probe () returned 0x4036d0
	[0069.244] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-MX", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\es-MX", lpFilePart=0x318583c*="es-MX") returned 0xd
	[0069.245] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31899029, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.245] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.245] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31899029, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.245] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.245] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.245] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.245] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.245] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.245] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.246] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.246] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.247] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.247] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.248] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.248] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.248] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.248] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.248] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.248] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31899029, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31899029, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.248] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.248] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.248] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.248] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.248] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.248] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.248] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.248] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.248] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.248] malloc (_Size=0x1000) returned 0x31d45a8
	[0069.249] _swprintf (in: param_1=0x31d45a8, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-MX\\CoronaVirus.txt") returned 29
	[0069.249] wcsstr (_Str="C:\\Boot\\es-MX\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.249] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31899029, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31899029, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.249] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.249] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0069.249] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0069.249] wcsncmp (_String1="et", _String2="..", _MaxCount=0x2) returned 55
	[0069.249] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\et-EE") returned 13
	[0069.249] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.249] wcsstr (_Str="C:\\Boot\\et-EE", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.249] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\et-EE\\CoronaVirus.txt" (normalized: "c:\\boot\\et-ee\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.251] _alloca_probe () returned 0x4036d0
	[0069.251] GetFullPathNameW (in: lpFileName="C:\\Boot\\et-EE", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\et-EE", lpFilePart=0x318583c*="et-EE") returned 0xd
	[0069.251] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31899029, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.251] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.251] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31899029, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.251] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.251] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.251] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.251] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.259] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.260] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.261] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.261] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.262] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.262] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.263] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.263] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31899029, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31899029, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.263] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.263] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.263] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.263] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.263] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.264] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.264] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.264] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.264] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.264] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.264] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.264] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.264] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.264] malloc (_Size=0x1000) returned 0x31d55b0
	[0069.264] _swprintf (in: param_1=0x31d55b0, param_2="%s\\%s" | out: param_1="C:\\Boot\\et-EE\\CoronaVirus.txt") returned 29
	[0069.264] wcsstr (_Str="C:\\Boot\\et-EE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.264] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31899029, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31899029, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.264] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.264] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0069.264] wcsncmp (_String1="f", _String2=".", _MaxCount=0x1) returned 56
	[0069.264] wcsncmp (_String1="fi", _String2="..", _MaxCount=0x2) returned 56
	[0069.264] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\fi-FI") returned 13
	[0069.264] wcsncmp (_String1="C:\\Boot\\f", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.264] wcsstr (_Str="C:\\Boot\\fi-FI", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.264] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\fi-FI\\CoronaVirus.txt" (normalized: "c:\\boot\\fi-fi\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.268] _alloca_probe () returned 0x4036d0
	[0069.268] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x318583c*="fi-FI") returned 0xd
	[0069.268] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x318bf35e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0069.268] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.268] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x318bf35e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.268] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.268] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.268] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.268] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.268] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.268] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.268] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.268] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.268] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.269] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.269] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.270] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.270] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.271] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.271] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318bf35e, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x318bf35e, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.271] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.271] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.271] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.271] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.271] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.271] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.271] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.272] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.272] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.272] malloc (_Size=0x1000) returned 0x31d65b8
	[0069.272] _swprintf (in: param_1=0x31d65b8, param_2="%s\\%s" | out: param_1="C:\\Boot\\fi-FI\\CoronaVirus.txt") returned 29
	[0069.272] wcsstr (_Str="C:\\Boot\\fi-FI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.272] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.272] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.272] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.272] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.272] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.273] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.273] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.274] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.274] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.275] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.275] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.275] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.275] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0069.275] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0069.275] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0069.275] wcsncmp (_String1="Fo", _String2="..", _MaxCount=0x2) returned 24
	[0069.275] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\Fonts") returned 13
	[0069.275] wcsncmp (_String1="C:\\Boot\\F", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.275] wcsstr (_Str="C:\\Boot\\Fonts", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.275] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\Fonts\\CoronaVirus.txt" (normalized: "c:\\boot\\fonts\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.285] _alloca_probe () returned 0x4036d0
	[0069.285] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x318583c*="Fonts") returned 0xd
	[0069.285] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x318e5410, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.285] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.285] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x318e5410, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.285] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.285] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0069.285] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0069.286] wcsncmp (_String1="ch", _String2="..", _MaxCount=0x2) returned 53
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.286] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0069.286] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.287] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0069.287] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.288] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.288] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0069.288] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0069.289] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0069.289] wcsncmp (_String1="ch", _String2="..", _MaxCount=0x2) returned 53
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.289] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0069.289] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.290] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0069.290] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.291] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.291] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0069.291] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318e5410, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x318e5410, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.291] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.291] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.291] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.291] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.292] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.292] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.292] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.292] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.292] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.292] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.292] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.292] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.292] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.292] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.292] malloc (_Size=0x1000) returned 0x31d75c0
	[0069.292] _swprintf (in: param_1=0x31d75c0, param_2="%s\\%s" | out: param_1="C:\\Boot\\Fonts\\CoronaVirus.txt") returned 29
	[0069.292] wcsstr (_Str="C:\\Boot\\Fonts\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.292] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0069.292] wcsncmp (_String1="j", _String2=".", _MaxCount=0x1) returned 60
	[0069.292] wcsncmp (_String1="jp", _String2="..", _MaxCount=0x2) returned 60
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.292] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0069.292] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0069.293] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.293] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0069.294] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.294] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0069.295] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0069.295] wcsncmp (_String1="k", _String2=".", _MaxCount=0x1) returned 61
	[0069.295] wcsncmp (_String1="ko", _String2="..", _MaxCount=0x2) returned 61
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0069.295] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.295] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.296] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0069.296] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.297] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0069.297] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x318587c | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0069.298] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0069.298] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.298] wcsncmp (_String1="ma", _String2="..", _MaxCount=0x2) returned 63
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0069.298] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.298] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0069.307] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.307] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0069.307] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.307] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0069.308] _wcslwr (in: _String=0x3185884 | out: _String=".ttf") returned=".ttf"
	[0069.308] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0069.308] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0069.308] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.308] wcsncmp (_String1="ma", _String2="..", _MaxCount=0x2) returned 63
	[0069.308] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0069.308] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.308] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.308] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0069.308] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.308] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.308] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.309] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.309] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.309] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.309] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.309] wcsncmp (_String1="se", _String2="..", _MaxCount=0x2) returned 69
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.309] wcsncmp (_String1="se", _String2="..", _MaxCount=0x2) returned 69
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.309] wcsncmp (_String1="se", _String2="..", _MaxCount=0x2) returned 69
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0069.309] wcsncmp (_String1="w", _String2=".", _MaxCount=0x1) returned 73
	[0069.309] wcsncmp (_String1="wg", _String2="..", _MaxCount=0x2) returned 73
	[0069.309] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0069.309] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.310] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0069.310] wcsncmp (_String1="f", _String2=".", _MaxCount=0x1) returned 56
	[0069.310] wcsncmp (_String1="fr", _String2="..", _MaxCount=0x2) returned 56
	[0069.310] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-CA") returned 13
	[0069.310] wcsncmp (_String1="C:\\Boot\\f", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.310] wcsstr (_Str="C:\\Boot\\fr-CA", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.310] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\fr-CA\\CoronaVirus.txt" (normalized: "c:\\boot\\fr-ca\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.312] _alloca_probe () returned 0x4036d0
	[0069.312] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-CA", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\fr-CA", lpFilePart=0x318583c*="fr-CA") returned 0xd
	[0069.312] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x319319fa, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.313] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.313] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x319319fa, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.313] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.313] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.313] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.313] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.313] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319319fa, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319319fa, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.313] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.313] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.313] malloc (_Size=0x1000) returned 0x31d85c8
	[0069.313] _swprintf (in: param_1=0x31d85c8, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-CA\\CoronaVirus.txt") returned 29
	[0069.313] wcsstr (_Str="C:\\Boot\\fr-CA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.313] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319319fa, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319319fa, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.313] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.313] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0069.313] wcsncmp (_String1="f", _String2=".", _MaxCount=0x1) returned 56
	[0069.313] wcsncmp (_String1="fr", _String2="..", _MaxCount=0x2) returned 56
	[0069.313] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-FR") returned 13
	[0069.313] wcsncmp (_String1="C:\\Boot\\f", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.313] wcsstr (_Str="C:\\Boot\\fr-FR", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.314] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\fr-FR\\CoronaVirus.txt" (normalized: "c:\\boot\\fr-fr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.316] _alloca_probe () returned 0x4036d0
	[0069.316] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x318583c*="fr-FR") returned 0xd
	[0069.316] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31957b52, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bf20
	[0069.316] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.316] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31957b52, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.316] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.316] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.316] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.316] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.316] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.316] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.317] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.317] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.318] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.318] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.319] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.319] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.319] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.319] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.319] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.319] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31957b52, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31957b52, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.319] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.319] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.319] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.319] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.319] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.319] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.319] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.319] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.319] malloc (_Size=0x1000) returned 0x31d95d0
	[0069.319] _swprintf (in: param_1=0x31d95d0, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-FR\\CoronaVirus.txt") returned 29
	[0069.319] wcsstr (_Str="C:\\Boot\\fr-FR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.319] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.319] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.319] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.319] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.319] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.320] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.320] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.321] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.321] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.322] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.322] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.322] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.322] FindClose (in: hFindFile=0x63bf20 | out: hFindFile=0x63bf20) returned 1
	[0069.323] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0069.323] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0069.323] wcsncmp (_String1="hr", _String2="..", _MaxCount=0x2) returned 58
	[0069.323] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\hr-HR") returned 13
	[0069.323] wcsncmp (_String1="C:\\Boot\\h", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.323] wcsstr (_Str="C:\\Boot\\hr-HR", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.323] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\hr-HR\\CoronaVirus.txt" (normalized: "c:\\boot\\hr-hr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.327] _alloca_probe () returned 0x4036d0
	[0069.327] GetFullPathNameW (in: lpFileName="C:\\Boot\\hr-HR", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\hr-HR", lpFilePart=0x318583c*="hr-HR") returned 0xd
	[0069.327] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31957b52, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.327] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.327] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31957b52, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.327] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.327] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.327] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.327] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.327] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.327] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.327] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.327] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.327] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.327] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.327] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.328] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.328] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.329] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.329] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.330] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.330] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.330] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31957b52, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31957b52, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.330] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.331] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.331] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.331] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.331] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.331] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.331] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.331] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.331] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.331] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.331] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.331] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.331] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.331] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.331] malloc (_Size=0x1000) returned 0x31da5d8
	[0069.331] _swprintf (in: param_1=0x31da5d8, param_2="%s\\%s" | out: param_1="C:\\Boot\\hr-HR\\CoronaVirus.txt") returned 29
	[0069.331] wcsstr (_Str="C:\\Boot\\hr-HR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.331] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31957b52, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31957b52, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.331] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.331] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0069.331] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0069.331] wcsncmp (_String1="hu", _String2="..", _MaxCount=0x2) returned 58
	[0069.331] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\hu-HU") returned 13
	[0069.331] wcsncmp (_String1="C:\\Boot\\h", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.332] wcsstr (_Str="C:\\Boot\\hu-HU", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.332] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\hu-HU\\CoronaVirus.txt" (normalized: "c:\\boot\\hu-hu\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.334] _alloca_probe () returned 0x4036d0
	[0069.334] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x318583c*="hu-HU") returned 0xd
	[0069.334] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3197de5b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c120
	[0069.334] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.334] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3197de5b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.334] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.334] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.334] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.334] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.334] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.334] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.334] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.334] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.334] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.334] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.334] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.334] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.335] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.335] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.336] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.336] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.337] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.337] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3197de5b, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3197de5b, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.337] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.337] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.337] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.337] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.337] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.337] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.337] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.337] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.337] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.337] malloc (_Size=0x1000) returned 0x31db5e0
	[0069.338] _swprintf (in: param_1=0x31db5e0, param_2="%s\\%s" | out: param_1="C:\\Boot\\hu-HU\\CoronaVirus.txt") returned 29
	[0069.338] wcsstr (_Str="C:\\Boot\\hu-HU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.338] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.338] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.338] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.338] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.338] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.339] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.339] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.340] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.340] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.341] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.341] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.341] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.341] FindNextFileW (in: hFindFile=0x63c120, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.341] FindClose (in: hFindFile=0x63c120 | out: hFindFile=0x63c120) returned 1
	[0069.341] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0069.341] wcsncmp (_String1="i", _String2=".", _MaxCount=0x1) returned 59
	[0069.341] wcsncmp (_String1="it", _String2="..", _MaxCount=0x2) returned 59
	[0069.341] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\it-IT") returned 13
	[0069.341] wcsncmp (_String1="C:\\Boot\\i", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.341] wcsstr (_Str="C:\\Boot\\it-IT", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.341] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\it-IT\\CoronaVirus.txt" (normalized: "c:\\boot\\it-it\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.351] _alloca_probe () returned 0x4036d0
	[0069.351] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x318583c*="it-IT") returned 0xd
	[0069.352] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x319a3ef2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.352] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.352] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x319a3ef2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.352] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.352] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.352] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.352] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.352] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.352] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.353] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.353] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.354] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.354] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.355] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.355] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319a3ef2, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319a3ef2, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.355] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.355] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.355] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.355] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.355] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.355] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.355] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.355] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.355] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.355] malloc (_Size=0x1000) returned 0x31dc5e8
	[0069.356] _swprintf (in: param_1=0x31dc5e8, param_2="%s\\%s" | out: param_1="C:\\Boot\\it-IT\\CoronaVirus.txt") returned 29
	[0069.356] wcsstr (_Str="C:\\Boot\\it-IT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.356] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.356] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.356] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.356] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.356] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.357] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.357] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.358] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.358] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.359] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.359] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.359] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.359] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.359] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.359] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.359] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.359] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.359] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.359] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.359] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.359] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.359] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0069.359] wcsncmp (_String1="j", _String2=".", _MaxCount=0x1) returned 60
	[0069.359] wcsncmp (_String1="ja", _String2="..", _MaxCount=0x2) returned 60
	[0069.359] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ja-JP") returned 13
	[0069.359] wcsncmp (_String1="C:\\Boot\\j", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.359] wcsstr (_Str="C:\\Boot\\ja-JP", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.359] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ja-JP\\CoronaVirus.txt" (normalized: "c:\\boot\\ja-jp\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.362] _alloca_probe () returned 0x4036d0
	[0069.362] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x318583c*="ja-JP") returned 0xd
	[0069.362] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x319a3ef2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.362] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.362] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x319a3ef2, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.362] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.362] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.362] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.362] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.362] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.362] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.362] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.362] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.362] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.363] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.363] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.363] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319a3ef2, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319a3ef2, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.363] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.363] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.363] malloc (_Size=0x1000) returned 0x31dd5f0
	[0069.363] _swprintf (in: param_1=0x31dd5f0, param_2="%s\\%s" | out: param_1="C:\\Boot\\ja-JP\\CoronaVirus.txt") returned 29
	[0069.363] wcsstr (_Str="C:\\Boot\\ja-JP\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.364] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.364] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.364] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.364] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.364] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.364] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0069.364] wcsncmp (_String1="k", _String2=".", _MaxCount=0x1) returned 61
	[0069.364] wcsncmp (_String1="ko", _String2="..", _MaxCount=0x2) returned 61
	[0069.364] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ko-KR") returned 13
	[0069.364] wcsncmp (_String1="C:\\Boot\\k", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.364] wcsstr (_Str="C:\\Boot\\ko-KR", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.364] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ko-KR\\CoronaVirus.txt" (normalized: "c:\\boot\\ko-kr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.367] _alloca_probe () returned 0x4036d0
	[0069.367] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x318583c*="ko-KR") returned 0xd
	[0069.367] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x319ca00f, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.367] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.367] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x319ca00f, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.367] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.367] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.367] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.367] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.367] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.367] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.367] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.367] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.367] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.367] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.367] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.367] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.367] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.367] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.367] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.368] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.368] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.369] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.369] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.370] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.370] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319ca00f, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319ca00f, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.370] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.370] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.370] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.370] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.370] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.370] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.370] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.370] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.371] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.371] malloc (_Size=0x1000) returned 0x31de5f8
	[0069.371] _swprintf (in: param_1=0x31de5f8, param_2="%s\\%s" | out: param_1="C:\\Boot\\ko-KR\\CoronaVirus.txt") returned 29
	[0069.371] wcsstr (_Str="C:\\Boot\\ko-KR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.371] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.371] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.371] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.371] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.371] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.372] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.372] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.373] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.373] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.374] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.374] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.374] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.374] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.374] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.374] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.374] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.374] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.374] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.374] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.374] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0069.374] wcsncmp (_String1="l", _String2=".", _MaxCount=0x1) returned 62
	[0069.374] wcsncmp (_String1="lt", _String2="..", _MaxCount=0x2) returned 62
	[0069.374] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\lt-LT") returned 13
	[0069.374] wcsncmp (_String1="C:\\Boot\\l", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.374] wcsstr (_Str="C:\\Boot\\lt-LT", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.374] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\lt-LT\\CoronaVirus.txt" (normalized: "c:\\boot\\lt-lt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.376] _alloca_probe () returned 0x4036d0
	[0069.376] GetFullPathNameW (in: lpFileName="C:\\Boot\\lt-LT", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\lt-LT", lpFilePart=0x318583c*="lt-LT") returned 0xd
	[0069.376] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x319ca00f, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c020
	[0069.377] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.377] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x319ca00f, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.377] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.377] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.377] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.377] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.377] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.377] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.378] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.378] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.379] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.379] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.380] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.380] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.380] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.380] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.380] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.380] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.380] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.380] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319ca00f, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319ca00f, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.380] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.380] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.380] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.380] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.380] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.380] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.380] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.380] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.380] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.380] malloc (_Size=0x1000) returned 0x31df600
	[0069.380] _swprintf (in: param_1=0x31df600, param_2="%s\\%s" | out: param_1="C:\\Boot\\lt-LT\\CoronaVirus.txt") returned 29
	[0069.380] wcsstr (_Str="C:\\Boot\\lt-LT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.380] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319ca00f, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319ca00f, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.380] FindClose (in: hFindFile=0x63c020 | out: hFindFile=0x63c020) returned 1
	[0069.381] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0069.381] wcsncmp (_String1="l", _String2=".", _MaxCount=0x1) returned 62
	[0069.381] wcsncmp (_String1="lv", _String2="..", _MaxCount=0x2) returned 62
	[0069.381] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\lv-LV") returned 13
	[0069.381] wcsncmp (_String1="C:\\Boot\\l", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.381] wcsstr (_Str="C:\\Boot\\lv-LV", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.381] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\lv-LV\\CoronaVirus.txt" (normalized: "c:\\boot\\lv-lv\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.383] _alloca_probe () returned 0x4036d0
	[0069.383] GetFullPathNameW (in: lpFileName="C:\\Boot\\lv-LV", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\lv-LV", lpFilePart=0x318583c*="lv-LV") returned 0xd
	[0069.383] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x319f053e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.384] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.384] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x319f053e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.384] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.384] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.384] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.384] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.384] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.384] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.385] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.385] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.386] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.386] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.387] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.387] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.387] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.387] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319f053e, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319f053e, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.387] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.387] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.387] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.387] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.387] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.387] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.387] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.387] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.387] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.387] malloc (_Size=0x1000) returned 0x31e0608
	[0069.387] _swprintf (in: param_1=0x31e0608, param_2="%s\\%s" | out: param_1="C:\\Boot\\lv-LV\\CoronaVirus.txt") returned 29
	[0069.387] wcsstr (_Str="C:\\Boot\\lv-LV\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.387] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319f053e, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x319f053e, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.387] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.388] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0069.388] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.388] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".bat", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".doc", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".jpg", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".jpe", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".txt", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".tex", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".dbf", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".xls", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".cry", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".xml", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".vsd", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".pdf", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".csv", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.388] wcsstr (_Str=".bmp", _SubStr=".exe") returned 0x0
	[0069.388] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".tif", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".1cd", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".tax", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".gif", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".gbr", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".png", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".mdb", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".mdf", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".sdf", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".dwg", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".dxf", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".dgn", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".stl", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".gho", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".v2i", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".3ds", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".ppt", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".acc", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".vpd", _SubStr=".exe") returned 0x0
	[0069.389] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.389] wcsstr (_Str=".odt", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".ods", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".rar", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".zip", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".cpp", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".pas", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".asm", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".rtf", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".lic", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".avi", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".mov", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".mp3", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".vbs", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".v8i", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".erf", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".epf", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".mxl", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".cfu", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".mht", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.390] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0069.390] _wcslwr (in: _String=0x3193af2 | out: _String=".exe") returned=".exe"
	[0069.391] wcsstr (_Str=".old", _SubStr=".exe") returned 0x0
	[0069.391] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0069.391] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0069.391] wcsncmp (_String1="nb", _String2="..", _MaxCount=0x2) returned 64
	[0069.391] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\nb-NO") returned 13
	[0069.391] wcsncmp (_String1="C:\\Boot\\n", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.391] wcsstr (_Str="C:\\Boot\\nb-NO", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.391] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\nb-NO\\CoronaVirus.txt" (normalized: "c:\\boot\\nb-no\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.404] _alloca_probe () returned 0x4036d0
	[0069.404] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x318583c*="nb-NO") returned 0xd
	[0069.404] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a164eb, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0069.404] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.404] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a164eb, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.405] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.405] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.405] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.405] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.405] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.405] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.406] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.406] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.407] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.407] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.408] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.408] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.408] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.410] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a164eb, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31a164eb, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.410] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.410] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.410] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.410] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.410] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.411] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.411] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.411] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.411] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.411] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.411] malloc (_Size=0x1000) returned 0x31e1610
	[0069.411] _swprintf (in: param_1=0x31e1610, param_2="%s\\%s" | out: param_1="C:\\Boot\\nb-NO\\CoronaVirus.txt") returned 29
	[0069.411] wcsstr (_Str="C:\\Boot\\nb-NO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.411] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.411] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.411] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.411] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.411] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.412] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.412] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.413] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.413] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.414] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.414] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.414] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.414] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.414] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.414] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.414] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.414] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.414] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.414] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.414] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.414] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.414] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.414] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.414] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.414] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0069.414] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0069.414] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0069.414] wcsncmp (_String1="nl", _String2="..", _MaxCount=0x2) returned 64
	[0069.414] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\nl-NL") returned 13
	[0069.414] wcsncmp (_String1="C:\\Boot\\n", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.414] wcsstr (_Str="C:\\Boot\\nl-NL", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.414] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\nl-NL\\CoronaVirus.txt" (normalized: "c:\\boot\\nl-nl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.417] _alloca_probe () returned 0x4036d0
	[0069.417] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x318583c*="nl-NL") returned 0xd
	[0069.417] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a3c99c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.417] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.417] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a3c99c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.417] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.417] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.417] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.417] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.417] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.417] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.418] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.418] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.418] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a3c99c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31a3c99c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.418] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.418] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.419] malloc (_Size=0x1000) returned 0x31e2618
	[0069.419] _swprintf (in: param_1=0x31e2618, param_2="%s\\%s" | out: param_1="C:\\Boot\\nl-NL\\CoronaVirus.txt") returned 29
	[0069.419] wcsstr (_Str="C:\\Boot\\nl-NL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.419] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.419] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.419] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.419] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.419] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.419] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0069.419] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0069.419] wcsncmp (_String1="pl", _String2="..", _MaxCount=0x2) returned 66
	[0069.419] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\pl-PL") returned 13
	[0069.419] wcsncmp (_String1="C:\\Boot\\p", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.419] wcsstr (_Str="C:\\Boot\\pl-PL", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.419] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\pl-PL\\CoronaVirus.txt" (normalized: "c:\\boot\\pl-pl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.422] _alloca_probe () returned 0x4036d0
	[0069.422] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x318583c*="pl-PL") returned 0xd
	[0069.422] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31a3c99c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.422] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.422] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31a3c99c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.422] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.422] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.422] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.422] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.422] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.422] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.422] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.423] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.423] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.424] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.424] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.425] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.425] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.426] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.426] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a3c99c, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31a3c99c, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.426] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.426] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.426] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.426] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.426] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.426] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.426] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.426] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.426] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.426] malloc (_Size=0x1000) returned 0x31e3620
	[0069.426] _swprintf (in: param_1=0x31e3620, param_2="%s\\%s" | out: param_1="C:\\Boot\\pl-PL\\CoronaVirus.txt") returned 29
	[0069.426] wcsstr (_Str="C:\\Boot\\pl-PL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.426] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.427] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.427] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.427] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.427] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.428] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.428] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.429] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.429] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.429] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.430] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.430] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0069.430] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0069.430] wcsncmp (_String1="pt", _String2="..", _MaxCount=0x2) returned 66
	[0069.430] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-BR") returned 13
	[0069.430] wcsncmp (_String1="C:\\Boot\\p", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.430] wcsstr (_Str="C:\\Boot\\pt-BR", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.430] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\pt-BR\\CoronaVirus.txt" (normalized: "c:\\boot\\pt-br\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.432] _alloca_probe () returned 0x4036d0
	[0069.432] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x318583c*="pt-BR") returned 0xd
	[0069.432] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31a62bb8, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bee0
	[0069.433] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.433] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31a62bb8, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.433] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.433] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.433] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.433] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.433] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.433] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.434] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.434] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.435] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.435] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.436] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.436] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.436] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.436] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.436] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a62bb8, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31a62bb8, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.436] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.436] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.436] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.436] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.436] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.436] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.436] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.436] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.436] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.436] malloc (_Size=0x1000) returned 0x31e4628
	[0069.436] _swprintf (in: param_1=0x31e4628, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-BR\\CoronaVirus.txt") returned 29
	[0069.436] wcsstr (_Str="C:\\Boot\\pt-BR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.436] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.436] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.437] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.437] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.437] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.438] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.438] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.439] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.439] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.439] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.439] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.439] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.439] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.439] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.439] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.439] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.439] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.439] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.439] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.448] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.448] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.449] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.449] FindClose (in: hFindFile=0x63bee0 | out: hFindFile=0x63bee0) returned 1
	[0069.449] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0069.449] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0069.449] wcsncmp (_String1="pt", _String2="..", _MaxCount=0x2) returned 66
	[0069.449] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-PT") returned 13
	[0069.449] wcsncmp (_String1="C:\\Boot\\p", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.449] wcsstr (_Str="C:\\Boot\\pt-PT", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.449] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\pt-PT\\CoronaVirus.txt" (normalized: "c:\\boot\\pt-pt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.451] _alloca_probe () returned 0x4036d0
	[0069.451] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x318583c*="pt-PT") returned 0xd
	[0069.451] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a88ef9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.452] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.452] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a88ef9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.452] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.452] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.452] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.452] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.452] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.452] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.453] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.453] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.453] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.453] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.453] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.453] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.453] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.453] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.453] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a88ef9, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31a88ef9, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.453] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.453] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.453] malloc (_Size=0x1000) returned 0x31e5630
	[0069.453] _swprintf (in: param_1=0x31e5630, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-PT\\CoronaVirus.txt") returned 29
	[0069.453] wcsstr (_Str="C:\\Boot\\pt-PT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.453] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.453] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.453] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.453] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.453] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.453] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0069.453] wcsncmp (_String1="q", _String2=".", _MaxCount=0x1) returned 67
	[0069.453] wcsncmp (_String1="qp", _String2="..", _MaxCount=0x2) returned 67
	[0069.453] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\qps-ploc") returned 16
	[0069.453] wcsncmp (_String1="C:\\Boot\\q", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.453] wcsstr (_Str="C:\\Boot\\qps-ploc", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.453] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\qps-ploc\\CoronaVirus.txt" (normalized: "c:\\boot\\qps-ploc\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.456] _alloca_probe () returned 0x4036d0
	[0069.456] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\qps-ploc", lpFilePart=0x318583c*="qps-ploc") returned 0x10
	[0069.456] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a88ef9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.456] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.456] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31a88ef9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.456] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.456] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.456] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.456] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.456] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.457] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.457] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.458] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.458] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.459] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.459] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.459] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a88ef9, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31a88ef9, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.459] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.459] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.460] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.460] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.460] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.460] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.460] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.460] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.460] malloc (_Size=0x1000) returned 0x31e6638
	[0069.460] _swprintf (in: param_1=0x31e6638, param_2="%s\\%s" | out: param_1="C:\\Boot\\qps-ploc\\CoronaVirus.txt") returned 32
	[0069.460] wcsstr (_Str="C:\\Boot\\qps-ploc\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.460] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.460] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.460] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.460] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.460] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.460] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.460] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.460] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.461] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.461] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.462] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.462] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.463] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.463] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.463] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.463] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.463] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0069.463] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0069.463] wcsncmp (_String1="Re", _String2="..", _MaxCount=0x2) returned 36
	[0069.463] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources") returned 17
	[0069.463] wcsncmp (_String1="C:\\Boot\\R", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.463] wcsstr (_Str="C:\\Boot\\Resources", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.464] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\Resources\\CoronaVirus.txt" (normalized: "c:\\boot\\resources\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.466] _alloca_probe () returned 0x4036d0
	[0069.466] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\Resources", lpFilePart=0x318583c*="Resources") returned 0x11
	[0069.466] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31aaee35, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bf20
	[0069.466] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.466] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31aaee35, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.466] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.466] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1
	[0069.466] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.466] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.466] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.466] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.467] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0069.467] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0069.468] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.468] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0069.469] _wcslwr (in: _String=0x318587a | out: _String=".dll") returned=".dll"
	[0069.469] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0069.469] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31aaee35, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31aaee35, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.469] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.469] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.470] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.470] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.470] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.470] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.470] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.470] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.470] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.470] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.470] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.470] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.470] _wcslwr (in: _String=0x3185882 | out: _String=".txt") returned=".txt"
	[0069.470] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.470] malloc (_Size=0x1000) returned 0x31e7640
	[0069.470] _swprintf (in: param_1=0x31e7640, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources\\CoronaVirus.txt") returned 33
	[0069.470] wcsstr (_Str="C:\\Boot\\Resources\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.470] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0069.470] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0069.470] wcsncmp (_String1="en", _String2="..", _MaxCount=0x2) returned 55
	[0069.470] _swprintf (in: param_1=0x3185a90, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources\\en-US") returned 23
	[0069.470] wcsncmp (_String1="C:\\Boot\\R", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.470] wcsstr (_Str="C:\\Boot\\Resources\\en-US", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.470] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\Resources\\en-US\\CoronaVirus.txt" (normalized: "c:\\boot\\resources\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.472] _alloca_probe () returned 0x4036d0
	[0069.473] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US", nBufferLength=0x1000, lpBuffer=0x317f818, lpFilePart=0x31775c4 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x31775c4*="en-US") returned 0x17
	[0069.474] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0x31775c8 | out: lpFindFileData=0x31775c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31ad5335, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.474] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.474] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x31775c8 | out: lpFindFileData=0x31775c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31ad5335, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.474] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.474] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x31775c8 | out: lpFindFileData=0x31775c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1
	[0069.474] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.474] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.474] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.474] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.475] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.475] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0069.475] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.475] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0069.475] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.475] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0069.475] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.475] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0069.475] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.475] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0069.475] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.476] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0069.476] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0069.477] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.477] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.478] _wcslwr (in: _String=0x317760a | out: _String=".mui") returned=".mui"
	[0069.478] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0069.478] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x31775c8 | out: lpFindFileData=0x31775c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ad5335, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31ad5335, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.478] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.478] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.478] _wcslwr (in: _String=0x317760a | out: _String=".txt") returned=".txt"
	[0069.478] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0069.478] _wcslwr (in: _String=0x317760a | out: _String=".txt") returned=".txt"
	[0069.478] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0069.478] _wcslwr (in: _String=0x317760a | out: _String=".txt") returned=".txt"
	[0069.478] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0069.478] _wcslwr (in: _String=0x317760a | out: _String=".txt") returned=".txt"
	[0069.478] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0069.478] _wcslwr (in: _String=0x317760a | out: _String=".txt") returned=".txt"
	[0069.478] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0069.478] _wcslwr (in: _String=0x317760a | out: _String=".txt") returned=".txt"
	[0069.478] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0069.478] malloc (_Size=0x1000) returned 0x31e8648
	[0069.478] _swprintf (in: param_1=0x31e8648, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources\\en-US\\CoronaVirus.txt") returned 39
	[0069.478] wcsstr (_Str="C:\\Boot\\Resources\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.478] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x31775c8 | out: lpFindFileData=0x31775c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ad5335, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31ad5335, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.478] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.478] FindNextFileW (in: hFindFile=0x63bf20, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0069.478] FindClose (in: hFindFile=0x63bf20 | out: hFindFile=0x63bf20) returned 1
	[0069.479] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0069.479] wcsncmp (_String1="r", _String2=".", _MaxCount=0x1) returned 68
	[0069.479] wcsncmp (_String1="ro", _String2="..", _MaxCount=0x2) returned 68
	[0069.479] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ro-RO") returned 13
	[0069.479] wcsncmp (_String1="C:\\Boot\\r", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.479] wcsstr (_Str="C:\\Boot\\ro-RO", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.479] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ro-RO\\CoronaVirus.txt" (normalized: "c:\\boot\\ro-ro\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.481] _alloca_probe () returned 0x4036d0
	[0069.482] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\ro-RO", lpFilePart=0x318583c*="ro-RO") returned 0xd
	[0069.482] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31ad5335, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0069.482] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.482] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31ad5335, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.482] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.482] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.482] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.482] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.482] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0069.482] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.483] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0069.483] _wcslwr (in: _String=0x3185882 | out: _String=".mui") returned=".mui"
	[0069.483] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0069.483] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ad5335, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31ad5335, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.483] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.483] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.483] malloc (_Size=0x1000) returned 0x31e9650
	[0069.483] _swprintf (in: param_1=0x31e9650, param_2="%s\\%s" | out: param_1="C:\\Boot\\ro-RO\\CoronaVirus.txt") returned 29
	[0069.483] wcsstr (_Str="C:\\Boot\\ro-RO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.483] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ad5335, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31ad5335, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.483] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0069.483] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0069.483] wcsncmp (_String1="r", _String2=".", _MaxCount=0x1) returned 68
	[0069.483] wcsncmp (_String1="ru", _String2="..", _MaxCount=0x2) returned 68
	[0069.483] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ru-RU") returned 13
	[0069.483] wcsncmp (_String1="C:\\Boot\\r", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.483] wcsstr (_Str="C:\\Boot\\ru-RU", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.483] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ru-RU\\CoronaVirus.txt" (normalized: "c:\\boot\\ru-ru\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.492] _alloca_probe () returned 0x4036d0
	[0069.492] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x318583c*="ru-RU") returned 0xd
	[0069.492] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31afb33b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.493] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.493] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31afb33b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.493] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.493] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.493] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.493] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.493] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31afb33b, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31afb33b, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.493] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.493] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.493] malloc (_Size=0x1000) returned 0x31ea658
	[0069.493] _swprintf (in: param_1=0x31ea658, param_2="%s\\%s" | out: param_1="C:\\Boot\\ru-RU\\CoronaVirus.txt") returned 29
	[0069.493] wcsstr (_Str="C:\\Boot\\ru-RU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.493] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.493] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.493] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.493] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.493] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.494] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0069.494] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.494] wcsncmp (_String1="sk", _String2="..", _MaxCount=0x2) returned 69
	[0069.494] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sk-SK") returned 13
	[0069.494] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.494] wcsstr (_Str="C:\\Boot\\sk-SK", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.494] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sk-SK\\CoronaVirus.txt" (normalized: "c:\\boot\\sk-sk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.496] _alloca_probe () returned 0x4036d0
	[0069.496] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\sk-SK", lpFilePart=0x318583c*="sk-SK") returned 0xd
	[0069.496] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31afb33b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bee0
	[0069.496] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.496] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31afb33b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.496] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.496] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.496] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.496] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.496] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31afb33b, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31afb33b, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.496] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.497] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.497] malloc (_Size=0x1000) returned 0x31eb660
	[0069.497] _swprintf (in: param_1=0x31eb660, param_2="%s\\%s" | out: param_1="C:\\Boot\\sk-SK\\CoronaVirus.txt") returned 29
	[0069.497] wcsstr (_Str="C:\\Boot\\sk-SK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.497] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31afb33b, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31afb33b, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.497] FindClose (in: hFindFile=0x63bee0 | out: hFindFile=0x63bee0) returned 1
	[0069.497] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0069.497] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.497] wcsncmp (_String1="sl", _String2="..", _MaxCount=0x2) returned 69
	[0069.497] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sl-SI") returned 13
	[0069.497] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.497] wcsstr (_Str="C:\\Boot\\sl-SI", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.497] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sl-SI\\CoronaVirus.txt" (normalized: "c:\\boot\\sl-si\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.502] _alloca_probe () returned 0x4036d0
	[0069.502] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\sl-SI", lpFilePart=0x318583c*="sl-SI") returned 0xd
	[0069.503] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31afb33b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bee0
	[0069.503] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.503] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31afb33b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.503] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.503] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.503] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.503] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.503] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31afb33b, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31afb33b, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.503] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.503] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.503] malloc (_Size=0x1000) returned 0x31ec668
	[0069.503] _swprintf (in: param_1=0x31ec668, param_2="%s\\%s" | out: param_1="C:\\Boot\\sl-SI\\CoronaVirus.txt") returned 29
	[0069.503] wcsstr (_Str="C:\\Boot\\sl-SI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.503] FindNextFileW (in: hFindFile=0x63bee0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31afb33b, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31afb33b, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.503] FindClose (in: hFindFile=0x63bee0 | out: hFindFile=0x63bee0) returned 1
	[0069.504] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0069.504] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.504] wcsncmp (_String1="sr", _String2="..", _MaxCount=0x2) returned 69
	[0069.504] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-CS") returned 18
	[0069.504] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.504] wcsstr (_Str="C:\\Boot\\sr-Latn-CS", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.504] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sr-Latn-CS\\CoronaVirus.txt" (normalized: "c:\\boot\\sr-latn-cs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.507] _alloca_probe () returned 0x4036d0
	[0069.507] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\sr-Latn-CS", lpFilePart=0x318583c*="sr-Latn-CS") returned 0x12
	[0069.507] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c1a0
	[0069.508] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.508] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.508] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.508] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.508] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.508] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.508] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b21599, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b21599, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.508] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.508] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.508] malloc (_Size=0x1000) returned 0x31ed670
	[0069.508] _swprintf (in: param_1=0x31ed670, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-CS\\CoronaVirus.txt") returned 34
	[0069.508] wcsstr (_Str="C:\\Boot\\sr-Latn-CS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.508] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.508] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.508] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.508] FindNextFileW (in: hFindFile=0x63c1a0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.508] FindClose (in: hFindFile=0x63c1a0 | out: hFindFile=0x63c1a0) returned 1
	[0069.508] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0069.508] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.508] wcsncmp (_String1="sr", _String2="..", _MaxCount=0x2) returned 69
	[0069.508] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-RS") returned 18
	[0069.508] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.508] wcsstr (_Str="C:\\Boot\\sr-Latn-RS", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.508] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sr-Latn-RS\\CoronaVirus.txt" (normalized: "c:\\boot\\sr-latn-rs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.511] _alloca_probe () returned 0x4036d0
	[0069.511] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\sr-Latn-RS", lpFilePart=0x318583c*="sr-Latn-RS") returned 0x12
	[0069.511] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63c020
	[0069.512] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.512] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.512] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.512] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.512] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.512] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.512] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b21599, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b21599, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.512] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.512] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.512] malloc (_Size=0x1000) returned 0x31ee678
	[0069.512] _swprintf (in: param_1=0x31ee678, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-RS\\CoronaVirus.txt") returned 34
	[0069.512] wcsstr (_Str="C:\\Boot\\sr-Latn-RS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.512] FindNextFileW (in: hFindFile=0x63c020, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b21599, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b21599, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.512] FindClose (in: hFindFile=0x63c020 | out: hFindFile=0x63c020) returned 1
	[0069.512] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0069.512] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0069.513] wcsncmp (_String1="sv", _String2="..", _MaxCount=0x2) returned 69
	[0069.513] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sv-SE") returned 13
	[0069.513] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.513] wcsstr (_Str="C:\\Boot\\sv-SE", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.513] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sv-SE\\CoronaVirus.txt" (normalized: "c:\\boot\\sv-se\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.515] _alloca_probe () returned 0x4036d0
	[0069.515] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x318583c*="sv-SE") returned 0xd
	[0069.515] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.515] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.515] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.515] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.515] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.516] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.516] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.516] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b21599, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b21599, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.516] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.516] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.516] malloc (_Size=0x1000) returned 0x31ef680
	[0069.516] _swprintf (in: param_1=0x31ef680, param_2="%s\\%s" | out: param_1="C:\\Boot\\sv-SE\\CoronaVirus.txt") returned 29
	[0069.516] wcsstr (_Str="C:\\Boot\\sv-SE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.516] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.516] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.516] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.516] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.516] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.516] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0069.516] wcsncmp (_String1="t", _String2=".", _MaxCount=0x1) returned 70
	[0069.516] wcsncmp (_String1="tr", _String2="..", _MaxCount=0x2) returned 70
	[0069.516] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\tr-TR") returned 13
	[0069.516] wcsncmp (_String1="C:\\Boot\\t", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.516] wcsstr (_Str="C:\\Boot\\tr-TR", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.516] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\tr-TR\\CoronaVirus.txt" (normalized: "c:\\boot\\tr-tr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.518] _alloca_probe () returned 0x4036d0
	[0069.518] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x318583c*="tr-TR") returned 0xd
	[0069.519] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.519] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.519] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b21599, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.519] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.519] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.519] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.519] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.519] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b21599, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b21599, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.519] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.519] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.519] malloc (_Size=0x1000) returned 0x31f0688
	[0069.519] _swprintf (in: param_1=0x31f0688, param_2="%s\\%s" | out: param_1="C:\\Boot\\tr-TR\\CoronaVirus.txt") returned 29
	[0069.519] wcsstr (_Str="C:\\Boot\\tr-TR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.519] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.519] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.519] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.520] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.520] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.520] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0069.520] wcsncmp (_String1="u", _String2=".", _MaxCount=0x1) returned 71
	[0069.520] wcsncmp (_String1="uk", _String2="..", _MaxCount=0x2) returned 71
	[0069.520] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\uk-UA") returned 13
	[0069.520] wcsncmp (_String1="C:\\Boot\\u", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.520] wcsstr (_Str="C:\\Boot\\uk-UA", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.520] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\uk-UA\\CoronaVirus.txt" (normalized: "c:\\boot\\uk-ua\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.523] _alloca_probe () returned 0x4036d0
	[0069.523] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\uk-UA", lpFilePart=0x318583c*="uk-UA") returned 0xd
	[0069.523] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b477ef, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0069.523] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.523] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b477ef, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.523] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.523] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.523] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.523] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.523] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b477ef, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b477ef, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.523] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.523] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.523] malloc (_Size=0x1000) returned 0x31f1690
	[0069.523] _swprintf (in: param_1=0x31f1690, param_2="%s\\%s" | out: param_1="C:\\Boot\\uk-UA\\CoronaVirus.txt") returned 29
	[0069.523] wcsstr (_Str="C:\\Boot\\uk-UA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.523] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b477ef, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b477ef, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.523] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0069.524] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0069.524] wcsncmp (_String1="u", _String2=".", _MaxCount=0x1) returned 71
	[0069.524] wcsncmp (_String1="up", _String2="..", _MaxCount=0x2) returned 71
	[0069.524] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0069.524] wcsncmp (_String1="z", _String2=".", _MaxCount=0x1) returned 76
	[0069.524] wcsncmp (_String1="zh", _String2="..", _MaxCount=0x2) returned 76
	[0069.524] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-CN") returned 13
	[0069.524] wcsncmp (_String1="C:\\Boot\\z", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.524] wcsstr (_Str="C:\\Boot\\zh-CN", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.524] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\zh-CN\\CoronaVirus.txt" (normalized: "c:\\boot\\zh-cn\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.540] _alloca_probe () returned 0x4036d0
	[0069.540] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x318583c*="zh-CN") returned 0xd
	[0069.540] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b6d9f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0069.540] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.540] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b6d9f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.540] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.540] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.541] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.541] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.541] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b6d9f1, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b6d9f1, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.541] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.541] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.541] malloc (_Size=0x1000) returned 0x31f2698
	[0069.541] _swprintf (in: param_1=0x31f2698, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-CN\\CoronaVirus.txt") returned 29
	[0069.541] wcsstr (_Str="C:\\Boot\\zh-CN\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.541] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.541] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.541] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.541] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.541] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0069.546] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0069.546] wcsncmp (_String1="z", _String2=".", _MaxCount=0x1) returned 76
	[0069.546] wcsncmp (_String1="zh", _String2="..", _MaxCount=0x2) returned 76
	[0069.546] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-HK") returned 13
	[0069.546] wcsncmp (_String1="C:\\Boot\\z", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.546] wcsstr (_Str="C:\\Boot\\zh-HK", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.546] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\zh-HK\\CoronaVirus.txt" (normalized: "c:\\boot\\zh-hk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.548] _alloca_probe () returned 0x4036d0
	[0069.548] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x318583c*="zh-HK") returned 0xd
	[0069.548] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b6d9f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.548] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.548] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31b6d9f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.548] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.549] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.549] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.549] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.549] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b6d9f1, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b6d9f1, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.549] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.549] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.549] malloc (_Size=0x1000) returned 0x31f36a0
	[0069.549] _swprintf (in: param_1=0x31f36a0, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-HK\\CoronaVirus.txt") returned 29
	[0069.549] wcsstr (_Str="C:\\Boot\\zh-HK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.549] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.549] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.549] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.549] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.549] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.549] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0069.549] wcsncmp (_String1="z", _String2=".", _MaxCount=0x1) returned 76
	[0069.549] wcsncmp (_String1="zh", _String2="..", _MaxCount=0x2) returned 76
	[0069.549] _swprintf (in: param_1=0x3193d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-TW") returned 13
	[0069.549] wcsncmp (_String1="C:\\Boot\\z", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0069.549] wcsstr (_Str="C:\\Boot\\zh-TW", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.549] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\zh-TW\\CoronaVirus.txt" (normalized: "c:\\boot\\zh-tw\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.552] _alloca_probe () returned 0x4036d0
	[0069.552] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x1000, lpBuffer=0x318da90, lpFilePart=0x318583c | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x318583c*="zh-TW") returned 0xd
	[0069.552] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31b93cb5, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63bfe0
	[0069.552] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.552] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31b93cb5, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.552] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.552] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0069.553] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.553] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.553] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b93cb5, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31b93cb5, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.553] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.553] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.553] malloc (_Size=0x1000) returned 0x31f46a8
	[0069.553] _swprintf (in: param_1=0x31f46a8, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-TW\\CoronaVirus.txt") returned 29
	[0069.553] wcsstr (_Str="C:\\Boot\\zh-TW\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.553] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0069.553] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0069.553] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0069.553] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x3185840 | out: lpFindFileData=0x3185840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0069.553] FindClose (in: hFindFile=0x63bfe0 | out: hFindFile=0x63bfe0) returned 1
	[0069.553] FindNextFileW (in: hFindFile=0x63c1e0, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0069.553] FindClose (in: hFindFile=0x63c1e0 | out: hFindFile=0x63c1e0) returned 1
	[0069.553] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0069.553] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0069.554] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0069.554] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0069.554] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.554] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0069.554] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0069.554] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0069.554] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0069.554] malloc (_Size=0x1000) returned 0x31f56b0
	[0069.554] _swprintf (in: param_1=0x31f56b0, param_2="%s\\%s" | out: param_1="C:\\BOOTSECT.bak") returned 15
	[0069.554] wcsstr (_Str="C:\\BOOTSECT.bak", _SubStr="CoronaVirus") returned 0x0
	[0069.554] wcsstr (_Str="C:\\BOOTSECT.bak", _SubStr="wasse") returned 0x0
	[0069.554] wcsstr (_Str="C:\\BOOTSECT.bak", _SubStr="passw") returned 0x0
	[0069.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31f56b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f8
	[0069.554] SetThreadPriority (hThread=0x2f8, nPriority=15) returned 1
	[0069.556] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0069.556] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0069.556] wcsncmp (_String1="Do", _String2="..", _MaxCount=0x2) returned 22
	[0069.556] _swprintf (in: param_1=0x31a1f80, param_2="%s\\%s" | out: param_1="C:\\Documents and Settings") returned 25
	[0069.556] wcsncmp (_String1="C:\\Docume", _String2="C:\\WINDOW", _MaxCount=0x9) returned -19
	[0069.556] wcsstr (_Str="C:\\Documents and Settings", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.557] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Documents and Settings\\CoronaVirus.txt" (normalized: "c:\\documents and settings\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.572] _alloca_probe () returned 0x4036d0
	[0069.572] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x1000, lpBuffer=0x319bd08, lpFilePart=0x3193ab4 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x3193ab4*="Documents and Settings") returned 0x19
	[0069.572] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0069.573] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0069.573] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0069.573] wcsncmp (_String1="ES", _String2="..", _MaxCount=0x2) returned 23
	[0069.573] _swprintf (in: param_1=0x31a1f80, param_2="%s\\%s" | out: param_1="C:\\ESD") returned 6
	[0069.573] wcsncmp (_String1="C:\\ESD", _String2="C:\\WINDOW", _MaxCount=0x9) returned -18
	[0069.573] wcsstr (_Str="C:\\ESD", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.573] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\ESD\\CoronaVirus.txt" (normalized: "c:\\esd\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.577] _alloca_probe () returned 0x4036d0
	[0069.577] GetFullPathNameW (in: lpFileName="C:\\ESD", nBufferLength=0x1000, lpBuffer=0x319bd08, lpFilePart=0x3193ab4 | out: lpBuffer="C:\\ESD", lpFilePart=0x3193ab4*="ESD") returned 0x6
	[0069.577] FindFirstFileW (in: lpFileName="C:\\ESD\\*.*", lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0x31bb9f31, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.577] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.577] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0x31bb9f31, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.578] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.578] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31bb9f31, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31bb9f31, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.578] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.578] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.578] malloc (_Size=0x1000) returned 0x31f66b8
	[0069.578] _swprintf (in: param_1=0x31f66b8, param_2="%s\\%s" | out: param_1="C:\\ESD\\CoronaVirus.txt") returned 22
	[0069.578] wcsstr (_Str="C:\\ESD\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.578] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31bb9f31, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31bb9f31, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0069.578] FindClose (in: hFindFile=0x63be60 | out: hFindFile=0x63be60) returned 1
	[0069.578] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0069.578] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0069.578] wcsncmp (_String1="hi", _String2="..", _MaxCount=0x2) returned 58
	[0069.578] FindNextFileW (in: hFindFile=0x63bda0, lpFindFileData=0x31a1d30 | out: lpFindFileData=0x31a1d30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0069.578] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0069.578] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0069.578] _swprintf (in: param_1=0x31a1f80, param_2="%s\\%s" | out: param_1="C:\\Logs") returned 7
	[0069.578] wcsncmp (_String1="C:\\Logs", _String2="C:\\WINDOW", _MaxCount=0x9) returned -11
	[0069.579] wcsstr (_Str="C:\\Logs", _SubStr="Microsoft\\Windows") returned 0x0
	[0069.579] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Logs\\CoronaVirus.txt" (normalized: "c:\\logs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.586] _alloca_probe () returned 0x4036d0
	[0069.586] GetFullPathNameW (in: lpFileName="C:\\Logs", nBufferLength=0x1000, lpBuffer=0x319bd08, lpFilePart=0x3193ab4 | out: lpBuffer="C:\\Logs", lpFilePart=0x3193ab4*="Logs") returned 0x7
	[0069.586] FindFirstFileW (in: lpFileName="C:\\Logs\\*.*", lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31be012e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x63be60
	[0069.586] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.586] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31be012e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.592] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0069.592] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0069.592] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0069.592] wcsncmp (_String1="Ap", _String2="..", _MaxCount=0x2) returned 19
	[0069.592] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31be012e, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x31be012e, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0069.592] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0069.592] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0069.592] malloc (_Size=0x1000) returned 0x31f76c0
	[0069.592] _swprintf (in: param_1=0x31f76c0, param_2="%s\\%s" | out: param_1="C:\\Logs\\CoronaVirus.txt") returned 23
	[0069.592] wcsstr (_Str="C:\\Logs\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.592] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1
	[0069.592] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0069.592] wcsncmp (_String1="Ha", _String2="..", _MaxCount=0x2) returned 26
	[0069.592] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1
	[0069.592] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0069.592] wcsncmp (_String1="In", _String2="..", _MaxCount=0x2) returned 27
	[0069.592] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1
	[0069.592] wcsncmp (_String1="K", _String2=".", _MaxCount=0x1) returned 29
	[0069.592] wcsncmp (_String1="Ke", _String2="..", _MaxCount=0x2) returned 29
	[0069.592] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1
	[0069.592] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.592] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.592] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.593] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.593] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1
	[0069.593] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.594] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1
	[0069.594] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.594] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1
	[0069.594] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.594] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1
	[0069.594] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.594] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1
	[0069.594] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.594] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1
	[0069.594] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.594] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1
	[0069.594] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.594] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1
	[0069.594] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.594] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1
	[0069.595] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.595] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.595] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1
	[0069.596] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.596] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.596] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.597] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1
	[0069.597] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.597] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.598] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1
	[0069.598] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.598] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.598] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1
	[0069.598] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.598] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.598] FindNextFileW (in: hFindFile=0x63be60, lpFindFileData=0x3193ab8 | out: lpFindFileData=0x3193ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1
	[0069.598] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0069.598] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0069.601] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\PerfLogs\\CoronaVirus.txt" (normalized: "c:\\perflogs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.603] _alloca_probe () returned 0x4036d0
	[0069.605] malloc (_Size=0x1000) returned 0x31f86c8
	[0069.605] _swprintf (in: param_1=0x31f86c8, param_2="%s\\%s" | out: param_1="C:\\PerfLogs\\CoronaVirus.txt") returned 27
	[0069.605] wcsstr (_Str="C:\\PerfLogs\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.605] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\CoronaVirus.txt" (normalized: "c:\\program files\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.607] _alloca_probe () returned 0x4036d0
	[0069.607] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.622] _alloca_probe () returned 0x4036d0
	[0069.622] malloc (_Size=0x1000) returned 0x31f96d0
	[0069.622] _swprintf (in: param_1=0x31f96d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\CoronaVirus.txt") returned 45
	[0069.622] wcsstr (_Str="C:\\Program Files\\Common Files\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.622] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\DESIGNER\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\designer\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.625] _alloca_probe () returned 0x4036d0
	[0069.625] malloc (_Size=0x1000) returned 0x31fa6d8
	[0069.625] _swprintf (in: param_1=0x31fa6d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\DESIGNER\\CoronaVirus.txt") returned 54
	[0069.625] wcsstr (_Str="C:\\Program Files\\Common Files\\DESIGNER\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.625] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.628] _alloca_probe () returned 0x4036d0
	[0069.628] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.632] _alloca_probe () returned 0x4036d0
	[0069.641] malloc (_Size=0x1000) returned 0x31f56b0
	[0069.641] _swprintf (in: param_1=0x31f56b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0069.641] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.641] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", _SubStr="wasse") returned 0x0
	[0069.641] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", _SubStr="passw") returned 0x0
	[0069.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31f56b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x500
	[0069.641] SetThreadPriority (hThread=0x500, nPriority=15) returned 1
	[0069.643] malloc (_Size=0x1000) returned 0x31fb6e0
	[0069.643] _swprintf (in: param_1=0x31fb6e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CoronaVirus.txt") returned 73
	[0069.643] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.643] malloc (_Size=0x1000) returned 0x31fc6e8
	[0069.646] _swprintf (in: param_1=0x31fc6e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0069.646] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.648] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", _SubStr="wasse") returned 0x0
	[0069.648] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", _SubStr="passw") returned 0x0
	[0069.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31fc6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x508
	[0069.649] SetThreadPriority (hThread=0x508, nPriority=15) returned 1
	[0069.657] malloc (_Size=0x1000) returned 0x31f56b0
	[0069.657] _swprintf (in: param_1=0x31f56b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0069.658] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.658] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", _SubStr="wasse") returned 0x0
	[0069.658] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", _SubStr="passw") returned 0x0
	[0069.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31f56b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x510
	[0069.658] SetThreadPriority (hThread=0x510, nPriority=15) returned 1
	[0069.660] malloc (_Size=0x1000) returned 0x31fd6f0
	[0069.660] _swprintf (in: param_1=0x31fd6f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\CoronaVirus.txt") returned 62
	[0069.660] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.660] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.668] _alloca_probe () returned 0x4036d0
	[0069.668] malloc (_Size=0x1000) returned 0x31f56b0
	[0069.668] _swprintf (in: param_1=0x31f56b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0069.668] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.668] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", _SubStr="wasse") returned 0x0
	[0069.668] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", _SubStr="passw") returned 0x0
	[0069.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31f56b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x504
	[0069.669] SetThreadPriority (hThread=0x504, nPriority=15) returned 1
	[0069.670] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.678] _alloca_probe () returned 0x4036d0
	[0069.679] malloc (_Size=0x1000) returned 0x31f56b0
	[0069.679] _swprintf (in: param_1=0x31f56b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CoronaVirus.txt") returned 72
	[0069.679] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.679] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.681] _alloca_probe () returned 0x4036d0
	[0069.681] malloc (_Size=0x1000) returned 0x31fe6f8
	[0069.682] _swprintf (in: param_1=0x31fe6f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CoronaVirus.txt") returned 72
	[0069.682] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.682] malloc (_Size=0x1000) returned 0x31ff700
	[0069.682] _swprintf (in: param_1=0x31ff700, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0069.682] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.682] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", _SubStr="wasse") returned 0x0
	[0069.682] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", _SubStr="passw") returned 0x0
	[0069.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x31ff700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d4
	[0069.682] SetThreadPriority (hThread=0x4d4, nPriority=15) returned 1
	[0069.683] malloc (_Size=0x1000) returned 0x3200708
	[0069.685] _swprintf (in: param_1=0x3200708, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\CoronaVirus.txt") returned 66
	[0069.685] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.685] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.687] _alloca_probe () returned 0x4036d0
	[0069.687] malloc (_Size=0x1000) returned 0x31ff700
	[0069.687] _swprintf (in: param_1=0x31ff700, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CoronaVirus.txt") returned 72
	[0069.687] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.687] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.696] _alloca_probe () returned 0x4036d0
	[0069.696] malloc (_Size=0x1000) returned 0x3201710
	[0069.696] _swprintf (in: param_1=0x3201710, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CoronaVirus.txt") returned 72
	[0069.696] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.696] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.699] _alloca_probe () returned 0x4036d0
	[0069.699] malloc (_Size=0x1000) returned 0x3202718
	[0069.699] _swprintf (in: param_1=0x3202718, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CoronaVirus.txt") returned 72
	[0069.699] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.699] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.702] _alloca_probe () returned 0x4036d0
	[0069.702] malloc (_Size=0x1000) returned 0x3203720
	[0069.702] _swprintf (in: param_1=0x3203720, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CoronaVirus.txt") returned 72
	[0069.702] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.702] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.704] _alloca_probe () returned 0x4036d0
	[0069.704] malloc (_Size=0x1000) returned 0x3204728
	[0069.705] _swprintf (in: param_1=0x3204728, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CoronaVirus.txt") returned 72
	[0069.705] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.705] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.708] _alloca_probe () returned 0x4036d0
	[0069.709] malloc (_Size=0x1000) returned 0x3205730
	[0069.709] _swprintf (in: param_1=0x3205730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0069.709] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.709] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", _SubStr="wasse") returned 0x0
	[0069.709] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", _SubStr="passw") returned 0x0
	[0069.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3205730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51c
	[0069.709] SetThreadPriority (hThread=0x51c, nPriority=15) returned 1
	[0069.710] malloc (_Size=0x1000) returned 0x3206738
	[0069.711] _swprintf (in: param_1=0x3206738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0069.711] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.712] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", _SubStr="wasse") returned 0x0
	[0069.712] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", _SubStr="passw") returned 0x0
	[0069.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3206738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x520
	[0069.712] SetThreadPriority (hThread=0x520, nPriority=15) returned 1
	[0069.714] malloc (_Size=0x1000) returned 0x3205730
	[0069.714] _swprintf (in: param_1=0x3205730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0069.714] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.714] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", _SubStr="wasse") returned 0x0
	[0069.714] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", _SubStr="passw") returned 0x0
	[0069.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3205730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x524
	[0069.714] SetThreadPriority (hThread=0x524, nPriority=15) returned 1
	[0069.715] malloc (_Size=0x1000) returned 0x3206738
	[0069.715] _swprintf (in: param_1=0x3206738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0069.715] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.715] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", _SubStr="wasse") returned 0x0
	[0069.715] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", _SubStr="passw") returned 0x0
	[0069.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3206738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50c
	[0069.732] SetThreadPriority (hThread=0x50c, nPriority=15) returned 1
	[0069.733] malloc (_Size=0x1000) returned 0x31fc6e8
	[0069.734] _swprintf (in: param_1=0x31fc6e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CoronaVirus.txt") returned 72
	[0069.734] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.734] malloc (_Size=0x1000) returned 0x3205730
	[0069.734] _swprintf (in: param_1=0x3205730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0069.734] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.734] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", _SubStr="wasse") returned 0x0
	[0069.734] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", _SubStr="passw") returned 0x0
	[0069.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3205730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x528
	[0069.734] SetThreadPriority (hThread=0x528, nPriority=15) returned 1
	[0069.738] malloc (_Size=0x1000) returned 0x3205730
	[0069.738] _swprintf (in: param_1=0x3205730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0069.738] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.738] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", _SubStr="wasse") returned 0x0
	[0069.738] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", _SubStr="passw") returned 0x0
	[0069.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3205730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c
	[0069.738] SetThreadPriority (hThread=0x52c, nPriority=15) returned 1
	[0069.740] malloc (_Size=0x1000) returned 0x3205730
	[0069.740] _swprintf (in: param_1=0x3205730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0069.740] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.740] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", _SubStr="wasse") returned 0x0
	[0069.740] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", _SubStr="passw") returned 0x0
	[0069.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3205730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x530
	[0069.741] SetThreadPriority (hThread=0x530, nPriority=15) returned 1
	[0069.742] malloc (_Size=0x1000) returned 0x3205730
	[0069.742] _swprintf (in: param_1=0x3205730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0069.742] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.742] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", _SubStr="wasse") returned 0x0
	[0069.742] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", _SubStr="passw") returned 0x0
	[0069.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3205730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x534
	[0069.743] SetThreadPriority (hThread=0x534, nPriority=15) returned 1
	[0069.745] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.748] _alloca_probe () returned 0x4036d0
	[0069.748] malloc (_Size=0x1000) returned 0x3205730
	[0069.748] _swprintf (in: param_1=0x3205730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CoronaVirus.txt") returned 72
	[0069.748] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.748] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.750] _alloca_probe () returned 0x4036d0
	[0069.750] malloc (_Size=0x1000) returned 0x3206738
	[0069.750] _swprintf (in: param_1=0x3206738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CoronaVirus.txt") returned 72
	[0069.750] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.750] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.753] _alloca_probe () returned 0x4036d0
	[0069.753] malloc (_Size=0x1000) returned 0x3207740
	[0069.753] _swprintf (in: param_1=0x3207740, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CoronaVirus.txt") returned 72
	[0069.753] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.753] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.755] _alloca_probe () returned 0x4036d0
	[0069.756] malloc (_Size=0x1000) returned 0x3208748
	[0069.756] _swprintf (in: param_1=0x3208748, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CoronaVirus.txt") returned 72
	[0069.756] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.756] malloc (_Size=0x1000) returned 0x3209750
	[0069.756] _swprintf (in: param_1=0x3209750, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0069.756] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", _SubStr="CoronaVirus") returned 0x0
	[0069.756] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", _SubStr="wasse") returned 0x0
	[0069.756] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", _SubStr="passw") returned 0x0
	[0069.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3209750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x518
	[0069.757] SetThreadPriority (hThread=0x518, nPriority=15) returned 1
	[0069.759] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.762] _alloca_probe () returned 0x4036d0
	[0069.763] malloc (_Size=0x1000) returned 0x3209750
	[0069.763] _swprintf (in: param_1=0x3209750, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CoronaVirus.txt") returned 72
	[0069.763] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.776] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.779] _alloca_probe () returned 0x4036d0
	[0069.779] malloc (_Size=0x1000) returned 0x320a758
	[0069.779] _swprintf (in: param_1=0x320a758, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CoronaVirus.txt") returned 72
	[0069.779] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.779] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.783] _alloca_probe () returned 0x4036d0
	[0069.784] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.786] _alloca_probe () returned 0x4036d0
	[0069.788] malloc (_Size=0x1000) returned 0x320b760
	[0069.788] _swprintf (in: param_1=0x320b760, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0069.788] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.788] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", _SubStr="wasse") returned 0x0
	[0069.788] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", _SubStr="passw") returned 0x0
	[0069.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320b760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x540
	[0069.789] SetThreadPriority (hThread=0x540, nPriority=15) returned 1
	[0069.790] malloc (_Size=0x1000) returned 0x320c768
	[0069.791] _swprintf (in: param_1=0x320c768, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CoronaVirus.txt") returned 87
	[0069.791] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.791] malloc (_Size=0x1000) returned 0x320b760
	[0069.791] _swprintf (in: param_1=0x320b760, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0069.791] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.791] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", _SubStr="wasse") returned 0x0
	[0069.791] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", _SubStr="passw") returned 0x0
	[0069.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320b760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c
	[0069.792] SetThreadPriority (hThread=0x53c, nPriority=15) returned 1
	[0069.793] malloc (_Size=0x1000) returned 0x320d770
	[0069.793] _swprintf (in: param_1=0x320d770, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CoronaVirus.txt") returned 80
	[0069.793] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.793] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.798] _alloca_probe () returned 0x4036d0
	[0069.798] malloc (_Size=0x1000) returned 0x320b760
	[0069.798] _swprintf (in: param_1=0x320b760, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CoronaVirus.txt") returned 87
	[0069.798] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.798] malloc (_Size=0x1000) returned 0x320e778
	[0069.799] _swprintf (in: param_1=0x320e778, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0069.799] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.799] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", _SubStr="wasse") returned 0x0
	[0069.799] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", _SubStr="passw") returned 0x0
	[0069.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320e778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x548
	[0069.799] SetThreadPriority (hThread=0x548, nPriority=15) returned 1
	[0069.804] malloc (_Size=0x1000) returned 0x320e778
	[0069.804] _swprintf (in: param_1=0x320e778, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0069.804] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.804] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", _SubStr="wasse") returned 0x0
	[0069.804] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", _SubStr="passw") returned 0x0
	[0069.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320e778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x544
	[0069.805] SetThreadPriority (hThread=0x544, nPriority=15) returned 1
	[0069.807] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.809] _alloca_probe () returned 0x4036d0
	[0069.809] malloc (_Size=0x1000) returned 0x320e778
	[0069.809] _swprintf (in: param_1=0x320e778, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CoronaVirus.txt") returned 87
	[0069.809] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.809] malloc (_Size=0x1000) returned 0x320f780
	[0069.809] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0069.809] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.809] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", _SubStr="wasse") returned 0x0
	[0069.809] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", _SubStr="passw") returned 0x0
	[0069.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550
	[0069.810] SetThreadPriority (hThread=0x550, nPriority=15) returned 1
	[0069.812] malloc (_Size=0x1000) returned 0x320f780
	[0069.812] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0069.812] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.812] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", _SubStr="wasse") returned 0x0
	[0069.812] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", _SubStr="passw") returned 0x0
	[0069.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x554
	[0069.813] SetThreadPriority (hThread=0x554, nPriority=15) returned 1
	[0069.815] malloc (_Size=0x1000) returned 0x320f780
	[0069.815] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 83
	[0069.815] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.815] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", _SubStr="wasse") returned 0x0
	[0069.815] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", _SubStr="passw") returned 0x0
	[0069.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558
	[0069.815] SetThreadPriority (hThread=0x558, nPriority=15) returned 1
	[0069.817] malloc (_Size=0x1000) returned 0x320f780
	[0069.817] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 75
	[0069.817] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.817] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", _SubStr="wasse") returned 0x0
	[0069.817] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", _SubStr="passw") returned 0x0
	[0069.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c
	[0069.818] SetThreadPriority (hThread=0x54c, nPriority=15) returned 1
	[0069.820] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.823] _alloca_probe () returned 0x4036d0
	[0069.823] malloc (_Size=0x1000) returned 0x320f780
	[0069.823] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 78
	[0069.823] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.823] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", _SubStr="wasse") returned 0x0
	[0069.823] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", _SubStr="passw") returned 0x0
	[0069.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560
	[0069.824] SetThreadPriority (hThread=0x560, nPriority=15) returned 1
	[0069.825] malloc (_Size=0x1000) returned 0x320f780
	[0069.825] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml") returned 87
	[0069.825] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.825] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", _SubStr="wasse") returned 0x0
	[0069.825] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", _SubStr="passw") returned 0x0
	[0069.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564
	[0069.826] SetThreadPriority (hThread=0x564, nPriority=15) returned 1
	[0069.829] malloc (_Size=0x1000) returned 0x320f780
	[0069.829] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml") returned 84
	[0069.829] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.829] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", _SubStr="wasse") returned 0x0
	[0069.829] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", _SubStr="passw") returned 0x0
	[0069.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568
	[0069.830] SetThreadPriority (hThread=0x568, nPriority=15) returned 1
	[0069.831] malloc (_Size=0x1000) returned 0x320f780
	[0069.831] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81
	[0069.831] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.831] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", _SubStr="wasse") returned 0x0
	[0069.831] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", _SubStr="passw") returned 0x0
	[0069.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c
	[0069.832] SetThreadPriority (hThread=0x56c, nPriority=15) returned 1
	[0069.833] malloc (_Size=0x1000) returned 0x320f780
	[0069.833] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82
	[0069.833] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.833] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", _SubStr="wasse") returned 0x0
	[0069.833] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", _SubStr="passw") returned 0x0
	[0069.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570
	[0069.834] SetThreadPriority (hThread=0x570, nPriority=15) returned 1
	[0069.835] malloc (_Size=0x1000) returned 0x3210788
	[0069.836] _swprintf (in: param_1=0x3210788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82
	[0069.836] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.836] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", _SubStr="wasse") returned 0x0
	[0069.836] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", _SubStr="passw") returned 0x0
	[0069.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3210788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574
	[0069.837] SetThreadPriority (hThread=0x574, nPriority=15) returned 1
	[0069.838] malloc (_Size=0x1000) returned 0x320f780
	[0069.838] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82
	[0069.838] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.838] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", _SubStr="wasse") returned 0x0
	[0069.838] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", _SubStr="passw") returned 0x0
	[0069.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578
	[0069.839] SetThreadPriority (hThread=0x578, nPriority=15) returned 1
	[0069.840] malloc (_Size=0x1000) returned 0x320f780
	[0069.840] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82
	[0069.840] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.840] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", _SubStr="wasse") returned 0x0
	[0069.840] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", _SubStr="passw") returned 0x0
	[0069.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x320f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c
	[0069.841] SetThreadPriority (hThread=0x57c, nPriority=15) returned 1
	[0069.842] malloc (_Size=0x1000) returned 0x320f780
	[0069.842] _swprintf (in: param_1=0x320f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CoronaVirus.txt") returned 85
	[0069.842] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.842] malloc (_Size=0x1000) returned 0x3210788
	[0069.842] _swprintf (in: param_1=0x3210788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 79
	[0069.842] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.842] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", _SubStr="wasse") returned 0x0
	[0069.842] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", _SubStr="passw") returned 0x0
	[0069.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3210788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580
	[0069.843] SetThreadPriority (hThread=0x580, nPriority=15) returned 1
	[0069.845] malloc (_Size=0x1000) returned 0x3210788
	[0069.845] _swprintf (in: param_1=0x3210788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 79
	[0069.845] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.845] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", _SubStr="wasse") returned 0x0
	[0069.845] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", _SubStr="passw") returned 0x0
	[0069.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3210788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584
	[0069.846] SetThreadPriority (hThread=0x584, nPriority=15) returned 1
	[0069.847] malloc (_Size=0x1000) returned 0x3210788
	[0069.847] _swprintf (in: param_1=0x3210788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml") returned 85
	[0069.847] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.847] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", _SubStr="wasse") returned 0x0
	[0069.847] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", _SubStr="passw") returned 0x0
	[0069.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3210788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588
	[0069.848] SetThreadPriority (hThread=0x588, nPriority=15) returned 1
	[0069.849] malloc (_Size=0x1000) returned 0x3211790
	[0069.849] _swprintf (in: param_1=0x3211790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 81
	[0069.850] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.850] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", _SubStr="wasse") returned 0x0
	[0069.850] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", _SubStr="passw") returned 0x0
	[0069.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3211790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c
	[0069.850] SetThreadPriority (hThread=0x58c, nPriority=15) returned 1
	[0069.852] malloc (_Size=0x1000) returned 0x3210788
	[0069.852] _swprintf (in: param_1=0x3210788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml") returned 85
	[0069.852] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.852] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", _SubStr="wasse") returned 0x0
	[0069.852] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", _SubStr="passw") returned 0x0
	[0069.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3210788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x590
	[0069.853] SetThreadPriority (hThread=0x590, nPriority=15) returned 1
	[0069.855] malloc (_Size=0x1000) returned 0x3210788
	[0069.855] _swprintf (in: param_1=0x3210788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 73
	[0069.855] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.855] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", _SubStr="wasse") returned 0x0
	[0069.855] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", _SubStr="passw") returned 0x0
	[0069.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3210788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c
	[0069.855] SetThreadPriority (hThread=0x55c, nPriority=15) returned 1
	[0069.857] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.860] _alloca_probe () returned 0x4036d0
	[0069.860] malloc (_Size=0x1000) returned 0x3210788
	[0069.860] _swprintf (in: param_1=0x3210788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CoronaVirus.txt") returned 91
	[0069.860] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.860] malloc (_Size=0x1000) returned 0x3211790
	[0069.860] _swprintf (in: param_1=0x3211790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml") returned 94
	[0069.860] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.860] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", _SubStr="wasse") returned 0x0
	[0069.860] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", _SubStr="passw") returned 0x0
	[0069.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3211790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598
	[0069.860] SetThreadPriority (hThread=0x598, nPriority=15) returned 1
	[0069.953] malloc (_Size=0x1000) returned 0x3211790
	[0069.953] _swprintf (in: param_1=0x3211790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml") returned 79
	[0069.953] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.953] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", _SubStr="wasse") returned 0x0
	[0069.953] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", _SubStr="passw") returned 0x0
	[0069.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3211790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594
	[0069.954] SetThreadPriority (hThread=0x594, nPriority=15) returned 1
	[0069.964] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.967] _alloca_probe () returned 0x4036d0
	[0069.967] malloc (_Size=0x1000) returned 0x3211790
	[0069.967] _swprintf (in: param_1=0x3211790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CoronaVirus.txt") returned 88
	[0069.967] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.967] malloc (_Size=0x1000) returned 0x3212798
	[0069.968] _swprintf (in: param_1=0x3212798, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml") returned 88
	[0069.968] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.968] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", _SubStr="wasse") returned 0x0
	[0069.968] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", _SubStr="passw") returned 0x0
	[0069.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3212798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0
	[0069.968] SetThreadPriority (hThread=0x5a0, nPriority=15) returned 1
	[0069.972] malloc (_Size=0x1000) returned 0x3212798
	[0069.972] _swprintf (in: param_1=0x3212798, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 76
	[0069.972] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.972] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", _SubStr="wasse") returned 0x0
	[0069.972] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", _SubStr="passw") returned 0x0
	[0069.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3212798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c
	[0069.973] SetThreadPriority (hThread=0x59c, nPriority=15) returned 1
	[0069.974] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.977] _alloca_probe () returned 0x4036d0
	[0069.977] malloc (_Size=0x1000) returned 0x3212798
	[0069.978] _swprintf (in: param_1=0x3212798, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CoronaVirus.txt") returned 87
	[0069.978] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.978] malloc (_Size=0x1000) returned 0x32137a0
	[0069.978] _swprintf (in: param_1=0x32137a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml") returned 86
	[0069.978] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.978] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", _SubStr="wasse") returned 0x0
	[0069.978] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", _SubStr="passw") returned 0x0
	[0069.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32137a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a8
	[0069.978] SetThreadPriority (hThread=0x5a8, nPriority=15) returned 1
	[0069.980] malloc (_Size=0x1000) returned 0x32137a0
	[0069.980] _swprintf (in: param_1=0x32137a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml") returned 75
	[0069.980] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.980] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", _SubStr="wasse") returned 0x0
	[0069.980] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", _SubStr="passw") returned 0x0
	[0069.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32137a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4
	[0069.981] SetThreadPriority (hThread=0x5a4, nPriority=15) returned 1
	[0069.982] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.984] _alloca_probe () returned 0x4036d0
	[0069.984] malloc (_Size=0x1000) returned 0x32137a0
	[0069.984] _swprintf (in: param_1=0x32137a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CoronaVirus.txt") returned 90
	[0069.984] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.984] malloc (_Size=0x1000) returned 0x32147a8
	[0069.985] _swprintf (in: param_1=0x32147a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml") returned 92
	[0069.985] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.985] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", _SubStr="wasse") returned 0x0
	[0069.985] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", _SubStr="passw") returned 0x0
	[0069.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32147a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0
	[0069.985] SetThreadPriority (hThread=0x5b0, nPriority=15) returned 1
	[0069.988] malloc (_Size=0x1000) returned 0x32147a8
	[0069.988] _swprintf (in: param_1=0x32147a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0069.988] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.988] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", _SubStr="wasse") returned 0x0
	[0069.988] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", _SubStr="passw") returned 0x0
	[0069.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32147a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac
	[0069.988] SetThreadPriority (hThread=0x5ac, nPriority=15) returned 1
	[0069.990] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0069.992] _alloca_probe () returned 0x4036d0
	[0069.992] malloc (_Size=0x1000) returned 0x32147a8
	[0069.992] _swprintf (in: param_1=0x32147a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CoronaVirus.txt") returned 88
	[0069.992] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0069.992] malloc (_Size=0x1000) returned 0x32157b0
	[0069.992] _swprintf (in: param_1=0x32157b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0069.992] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.992] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", _SubStr="wasse") returned 0x0
	[0069.992] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", _SubStr="passw") returned 0x0
	[0069.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32157b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b8
	[0069.993] SetThreadPriority (hThread=0x5b8, nPriority=15) returned 1
	[0069.995] malloc (_Size=0x1000) returned 0x32157b0
	[0069.995] _swprintf (in: param_1=0x32157b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0069.995] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", _SubStr="CoronaVirus") returned 0x0
	[0069.995] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", _SubStr="wasse") returned 0x0
	[0069.995] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", _SubStr="passw") returned 0x0
	[0069.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32157b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b4
	[0069.995] SetThreadPriority (hThread=0x5b4, nPriority=15) returned 1
	[0069.998] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.001] _alloca_probe () returned 0x4036d0
	[0070.001] malloc (_Size=0x1000) returned 0x32157b0
	[0070.001] _swprintf (in: param_1=0x32157b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CoronaVirus.txt") returned 88
	[0070.001] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.001] malloc (_Size=0x1000) returned 0x32167b8
	[0070.001] _swprintf (in: param_1=0x32167b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0070.001] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.002] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", _SubStr="wasse") returned 0x0
	[0070.002] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", _SubStr="passw") returned 0x0
	[0070.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32167b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c0
	[0070.002] SetThreadPriority (hThread=0x5c0, nPriority=15) returned 1
	[0070.004] malloc (_Size=0x1000) returned 0x32167b8
	[0070.004] _swprintf (in: param_1=0x32167b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0070.004] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.004] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", _SubStr="wasse") returned 0x0
	[0070.004] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", _SubStr="passw") returned 0x0
	[0070.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32167b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c4
	[0070.004] SetThreadPriority (hThread=0x5c4, nPriority=15) returned 1
	[0070.006] malloc (_Size=0x1000) returned 0x32167b8
	[0070.006] _swprintf (in: param_1=0x32167b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0070.006] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.006] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", _SubStr="wasse") returned 0x0
	[0070.006] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", _SubStr="passw") returned 0x0
	[0070.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32167b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c8
	[0070.007] SetThreadPriority (hThread=0x5c8, nPriority=15) returned 1
	[0070.009] malloc (_Size=0x1000) returned 0x32167b8
	[0070.009] _swprintf (in: param_1=0x32167b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0070.009] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.009] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", _SubStr="wasse") returned 0x0
	[0070.009] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", _SubStr="passw") returned 0x0
	[0070.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32167b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bc
	[0070.010] SetThreadPriority (hThread=0x5bc, nPriority=15) returned 1
	[0070.013] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.015] _alloca_probe () returned 0x4036d0
	[0070.015] malloc (_Size=0x1000) returned 0x32167b8
	[0070.015] _swprintf (in: param_1=0x32167b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CoronaVirus.txt") returned 72
	[0070.015] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.015] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.018] _alloca_probe () returned 0x4036d0
	[0070.018] malloc (_Size=0x1000) returned 0x32177c0
	[0070.018] _swprintf (in: param_1=0x32177c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CoronaVirus.txt") returned 72
	[0070.018] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.018] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.021] _alloca_probe () returned 0x4036d0
	[0070.021] malloc (_Size=0x1000) returned 0x32187c8
	[0070.021] _swprintf (in: param_1=0x32187c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CoronaVirus.txt") returned 72
	[0070.021] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.021] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.023] _alloca_probe () returned 0x4036d0
	[0070.023] malloc (_Size=0x1000) returned 0x32197d0
	[0070.023] _swprintf (in: param_1=0x32197d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CoronaVirus.txt") returned 83
	[0070.023] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.024] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.024] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml") returned 60
	[0070.024] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.024] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", _SubStr="wasse") returned 0x0
	[0070.024] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", _SubStr="passw") returned 0x0
	[0070.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x538
	[0070.024] SetThreadPriority (hThread=0x538, nPriority=15) returned 1
	[0070.058] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.058] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0070.058] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.058] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", _SubStr="wasse") returned 0x0
	[0070.058] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", _SubStr="passw") returned 0x0
	[0070.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc
	[0070.058] SetThreadPriority (hThread=0x5cc, nPriority=15) returned 1
	[0070.060] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.060] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0070.060] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.060] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", _SubStr="wasse") returned 0x0
	[0070.060] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", _SubStr="passw") returned 0x0
	[0070.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d0
	[0070.061] SetThreadPriority (hThread=0x5d0, nPriority=15) returned 1
	[0070.063] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.063] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0070.063] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.063] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", _SubStr="wasse") returned 0x0
	[0070.063] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", _SubStr="passw") returned 0x0
	[0070.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4
	[0070.064] SetThreadPriority (hThread=0x5d4, nPriority=15) returned 1
	[0070.065] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.065] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0070.066] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.066] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", _SubStr="wasse") returned 0x0
	[0070.066] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", _SubStr="passw") returned 0x0
	[0070.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d8
	[0070.066] SetThreadPriority (hThread=0x5d8, nPriority=15) returned 1
	[0070.067] malloc (_Size=0x1000) returned 0x321b7e0
	[0070.067] _swprintf (in: param_1=0x321b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0070.067] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.067] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", _SubStr="wasse") returned 0x0
	[0070.067] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", _SubStr="passw") returned 0x0
	[0070.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321b7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dc
	[0070.069] SetThreadPriority (hThread=0x5dc, nPriority=15) returned 1
	[0070.070] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.071] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0070.071] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.071] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", _SubStr="wasse") returned 0x0
	[0070.071] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", _SubStr="passw") returned 0x0
	[0070.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e0
	[0070.071] SetThreadPriority (hThread=0x5e0, nPriority=15) returned 1
	[0070.073] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.073] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml") returned 60
	[0070.073] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.073] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", _SubStr="wasse") returned 0x0
	[0070.073] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", _SubStr="passw") returned 0x0
	[0070.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e4
	[0070.073] SetThreadPriority (hThread=0x5e4, nPriority=15) returned 1
	[0070.075] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.075] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml") returned 60
	[0070.075] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.075] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", _SubStr="wasse") returned 0x0
	[0070.075] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", _SubStr="passw") returned 0x0
	[0070.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e8
	[0070.076] SetThreadPriority (hThread=0x5e8, nPriority=15) returned 1
	[0070.077] malloc (_Size=0x1000) returned 0x321b7e0
	[0070.077] _swprintf (in: param_1=0x321b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml") returned 61
	[0070.077] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.077] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", _SubStr="wasse") returned 0x0
	[0070.077] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", _SubStr="passw") returned 0x0
	[0070.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321b7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec
	[0070.081] SetThreadPriority (hThread=0x5ec, nPriority=15) returned 1
	[0070.082] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.082] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml") returned 61
	[0070.082] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.082] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", _SubStr="wasse") returned 0x0
	[0070.082] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", _SubStr="passw") returned 0x0
	[0070.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f0
	[0070.083] SetThreadPriority (hThread=0x5f0, nPriority=15) returned 1
	[0070.085] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.085] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml") returned 61
	[0070.085] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.085] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", _SubStr="wasse") returned 0x0
	[0070.085] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", _SubStr="passw") returned 0x0
	[0070.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f4
	[0070.085] SetThreadPriority (hThread=0x5f4, nPriority=15) returned 1
	[0070.087] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.087] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml") returned 60
	[0070.087] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.087] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", _SubStr="wasse") returned 0x0
	[0070.087] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", _SubStr="passw") returned 0x0
	[0070.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f8
	[0070.088] SetThreadPriority (hThread=0x5f8, nPriority=15) returned 1
	[0070.089] malloc (_Size=0x1000) returned 0x321b7e0
	[0070.089] _swprintf (in: param_1=0x321b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml") returned 60
	[0070.090] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.090] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", _SubStr="wasse") returned 0x0
	[0070.090] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", _SubStr="passw") returned 0x0
	[0070.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321b7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fc
	[0070.090] SetThreadPriority (hThread=0x5fc, nPriority=15) returned 1
	[0070.092] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.092] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml") returned 61
	[0070.092] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.092] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", _SubStr="wasse") returned 0x0
	[0070.092] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", _SubStr="passw") returned 0x0
	[0070.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x600
	[0070.092] SetThreadPriority (hThread=0x600, nPriority=15) returned 1
	[0070.094] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.094] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml") returned 60
	[0070.094] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.094] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", _SubStr="wasse") returned 0x0
	[0070.094] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", _SubStr="passw") returned 0x0
	[0070.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x604
	[0070.095] SetThreadPriority (hThread=0x604, nPriority=15) returned 1
	[0070.096] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.096] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml") returned 61
	[0070.096] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.096] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", _SubStr="wasse") returned 0x0
	[0070.097] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", _SubStr="passw") returned 0x0
	[0070.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x608
	[0070.097] SetThreadPriority (hThread=0x608, nPriority=15) returned 1
	[0070.098] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.099] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0070.099] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.099] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", _SubStr="wasse") returned 0x0
	[0070.099] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", _SubStr="passw") returned 0x0
	[0070.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60c
	[0070.100] SetThreadPriority (hThread=0x60c, nPriority=15) returned 1
	[0070.101] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.101] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0070.101] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.101] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", _SubStr="wasse") returned 0x0
	[0070.101] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", _SubStr="passw") returned 0x0
	[0070.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x610
	[0070.102] SetThreadPriority (hThread=0x610, nPriority=15) returned 1
	[0070.103] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.103] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0070.103] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.104] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", _SubStr="wasse") returned 0x0
	[0070.104] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", _SubStr="passw") returned 0x0
	[0070.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x614
	[0070.104] SetThreadPriority (hThread=0x614, nPriority=15) returned 1
	[0070.106] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.106] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0070.106] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.106] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", _SubStr="wasse") returned 0x0
	[0070.106] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", _SubStr="passw") returned 0x0
	[0070.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618
	[0070.106] SetThreadPriority (hThread=0x618, nPriority=15) returned 1
	[0070.107] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.108] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0070.108] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.108] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", _SubStr="wasse") returned 0x0
	[0070.109] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", _SubStr="passw") returned 0x0
	[0070.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61c
	[0070.109] SetThreadPriority (hThread=0x61c, nPriority=15) returned 1
	[0070.111] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.111] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0070.111] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.111] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", _SubStr="wasse") returned 0x0
	[0070.111] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", _SubStr="passw") returned 0x0
	[0070.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x620
	[0070.112] SetThreadPriority (hThread=0x620, nPriority=15) returned 1
	[0070.113] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.113] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml") returned 61
	[0070.113] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.113] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", _SubStr="wasse") returned 0x0
	[0070.113] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", _SubStr="passw") returned 0x0
	[0070.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624
	[0070.114] SetThreadPriority (hThread=0x624, nPriority=15) returned 1
	[0070.115] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.115] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml") returned 61
	[0070.115] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.115] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", _SubStr="wasse") returned 0x0
	[0070.115] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", _SubStr="passw") returned 0x0
	[0070.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x628
	[0070.116] SetThreadPriority (hThread=0x628, nPriority=15) returned 1
	[0070.117] malloc (_Size=0x1000) returned 0x321b7e0
	[0070.117] _swprintf (in: param_1=0x321b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml") returned 61
	[0070.118] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.118] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", _SubStr="wasse") returned 0x0
	[0070.118] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", _SubStr="passw") returned 0x0
	[0070.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321b7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62c
	[0070.119] SetThreadPriority (hThread=0x62c, nPriority=15) returned 1
	[0070.120] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.120] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0070.120] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.120] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", _SubStr="wasse") returned 0x0
	[0070.120] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", _SubStr="passw") returned 0x0
	[0070.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x630
	[0070.121] SetThreadPriority (hThread=0x630, nPriority=15) returned 1
	[0070.123] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.123] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0070.123] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.123] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", _SubStr="wasse") returned 0x0
	[0070.123] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", _SubStr="passw") returned 0x0
	[0070.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634
	[0070.123] SetThreadPriority (hThread=0x634, nPriority=15) returned 1
	[0070.128] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.128] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0070.128] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.128] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", _SubStr="wasse") returned 0x0
	[0070.128] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", _SubStr="passw") returned 0x0
	[0070.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x638
	[0070.129] SetThreadPriority (hThread=0x638, nPriority=15) returned 1
	[0070.131] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.131] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0070.131] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.131] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", _SubStr="wasse") returned 0x0
	[0070.131] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", _SubStr="passw") returned 0x0
	[0070.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x321a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63c
	[0070.132] SetThreadPriority (hThread=0x63c, nPriority=15) returned 1
	[0070.133] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.136] _alloca_probe () returned 0x4036d0
	[0070.136] malloc (_Size=0x1000) returned 0x321a7d8
	[0070.136] _swprintf (in: param_1=0x321a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CoronaVirus.txt") returned 72
	[0070.136] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.136] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.138] _alloca_probe () returned 0x4036d0
	[0070.138] malloc (_Size=0x1000) returned 0x321b7e0
	[0070.138] _swprintf (in: param_1=0x321b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\CoronaVirus.txt") returned 72
	[0070.139] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.139] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.141] _alloca_probe () returned 0x4036d0
	[0070.141] malloc (_Size=0x1000) returned 0x321c7e8
	[0070.142] _swprintf (in: param_1=0x321c7e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\CoronaVirus.txt") returned 72
	[0070.142] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.142] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.144] _alloca_probe () returned 0x4036d0
	[0070.144] malloc (_Size=0x1000) returned 0x321d7f0
	[0070.144] _swprintf (in: param_1=0x321d7f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\CoronaVirus.txt") returned 80
	[0070.144] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.145] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.146] _alloca_probe () returned 0x4036d0
	[0070.147] malloc (_Size=0x1000) returned 0x321e7f8
	[0070.147] _swprintf (in: param_1=0x321e7f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\CoronaVirus.txt") returned 72
	[0070.147] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.147] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.157] _alloca_probe () returned 0x4036d0
	[0070.157] malloc (_Size=0x1000) returned 0x321f800
	[0070.157] _swprintf (in: param_1=0x321f800, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\CoronaVirus.txt") returned 72
	[0070.157] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.157] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.159] _alloca_probe () returned 0x4036d0
	[0070.159] malloc (_Size=0x1000) returned 0x3220808
	[0070.160] _swprintf (in: param_1=0x3220808, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\CoronaVirus.txt") returned 72
	[0070.160] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.160] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.163] _alloca_probe () returned 0x4036d0
	[0070.163] malloc (_Size=0x1000) returned 0x3221810
	[0070.163] _swprintf (in: param_1=0x3221810, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\CoronaVirus.txt") returned 72
	[0070.163] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.163] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.165] _alloca_probe () returned 0x4036d0
	[0070.165] malloc (_Size=0x1000) returned 0x3222818
	[0070.166] _swprintf (in: param_1=0x3222818, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\CoronaVirus.txt") returned 72
	[0070.166] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.166] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.168] _alloca_probe () returned 0x4036d0
	[0070.168] malloc (_Size=0x1000) returned 0x3223820
	[0070.168] _swprintf (in: param_1=0x3223820, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\CoronaVirus.txt") returned 72
	[0070.168] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.168] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.171] _alloca_probe () returned 0x4036d0
	[0070.171] malloc (_Size=0x1000) returned 0x3224828
	[0070.171] _swprintf (in: param_1=0x3224828, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\CoronaVirus.txt") returned 72
	[0070.171] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.171] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.174] _alloca_probe () returned 0x4036d0
	[0070.174] malloc (_Size=0x1000) returned 0x3225830
	[0070.174] _swprintf (in: param_1=0x3225830, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\CoronaVirus.txt") returned 72
	[0070.174] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.174] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.176] _alloca_probe () returned 0x4036d0
	[0070.176] malloc (_Size=0x1000) returned 0x3226838
	[0070.176] _swprintf (in: param_1=0x3226838, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\CoronaVirus.txt") returned 72
	[0070.176] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.177] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.180] _alloca_probe () returned 0x4036d0
	[0070.180] malloc (_Size=0x1000) returned 0x3227840
	[0070.180] _swprintf (in: param_1=0x3227840, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\CoronaVirus.txt") returned 72
	[0070.180] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.180] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.182] _alloca_probe () returned 0x4036d0
	[0070.182] malloc (_Size=0x1000) returned 0x3228848
	[0070.182] _swprintf (in: param_1=0x3228848, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\CoronaVirus.txt") returned 72
	[0070.182] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.182] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.185] _alloca_probe () returned 0x4036d0
	[0070.186] malloc (_Size=0x1000) returned 0x3229850
	[0070.186] _swprintf (in: param_1=0x3229850, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\CoronaVirus.txt") returned 77
	[0070.186] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.186] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.188] _alloca_probe () returned 0x4036d0
	[0070.188] malloc (_Size=0x1000) returned 0x322a858
	[0070.188] _swprintf (in: param_1=0x322a858, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\CoronaVirus.txt") returned 72
	[0070.188] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.193] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.207] _alloca_probe () returned 0x4036d0
	[0070.207] malloc (_Size=0x1000) returned 0x322b860
	[0070.207] _swprintf (in: param_1=0x322b860, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\CoronaVirus.txt") returned 72
	[0070.207] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.207] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.210] _alloca_probe () returned 0x4036d0
	[0070.210] malloc (_Size=0x1000) returned 0x322c868
	[0070.210] _swprintf (in: param_1=0x322c868, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\CoronaVirus.txt") returned 72
	[0070.210] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.210] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.213] _alloca_probe () returned 0x4036d0
	[0070.213] malloc (_Size=0x1000) returned 0x322d870
	[0070.213] _swprintf (in: param_1=0x322d870, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\CoronaVirus.txt") returned 72
	[0070.213] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.213] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.215] _alloca_probe () returned 0x4036d0
	[0070.216] malloc (_Size=0x1000) returned 0x322e878
	[0070.216] _swprintf (in: param_1=0x322e878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\CoronaVirus.txt") returned 72
	[0070.216] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.216] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.218] _alloca_probe () returned 0x4036d0
	[0070.219] malloc (_Size=0x1000) returned 0x322f880
	[0070.219] _swprintf (in: param_1=0x322f880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\CoronaVirus.txt") returned 72
	[0070.219] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.219] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.221] _alloca_probe () returned 0x4036d0
	[0070.221] malloc (_Size=0x1000) returned 0x3230888
	[0070.221] _swprintf (in: param_1=0x3230888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\CoronaVirus.txt") returned 69
	[0070.221] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.221] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.225] _alloca_probe () returned 0x4036d0
	[0070.225] malloc (_Size=0x1000) returned 0x3231890
	[0070.225] _swprintf (in: param_1=0x3231890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\CoronaVirus.txt") returned 75
	[0070.225] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.225] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.228] _alloca_probe () returned 0x4036d0
	[0070.228] malloc (_Size=0x1000) returned 0x3232898
	[0070.228] _swprintf (in: param_1=0x3232898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\CoronaVirus.txt") returned 71
	[0070.228] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.228] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.232] _alloca_probe () returned 0x4036d0
	[0070.232] malloc (_Size=0x1000) returned 0x32338a0
	[0070.232] _swprintf (in: param_1=0x32338a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\CoronaVirus.txt") returned 95
	[0070.232] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.233] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.236] _alloca_probe () returned 0x4036d0
	[0070.237] malloc (_Size=0x1000) returned 0x32348a8
	[0070.237] _swprintf (in: param_1=0x32348a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\CoronaVirus.txt") returned 95
	[0070.237] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.237] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.239] _alloca_probe () returned 0x4036d0
	[0070.240] malloc (_Size=0x1000) returned 0x32358b0
	[0070.240] _swprintf (in: param_1=0x32358b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\CoronaVirus.txt") returned 76
	[0070.240] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.240] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.243] _alloca_probe () returned 0x4036d0
	[0070.243] malloc (_Size=0x1000) returned 0x32368b8
	[0070.243] _swprintf (in: param_1=0x32368b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0070.243] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.243] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", _SubStr="wasse") returned 0x0
	[0070.244] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", _SubStr="passw") returned 0x0
	[0070.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32368b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640
	[0070.244] SetThreadPriority (hThread=0x640, nPriority=15) returned 1
	[0070.246] malloc (_Size=0x1000) returned 0x32378c0
	[0070.246] _swprintf (in: param_1=0x32378c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\CoronaVirus.txt") returned 73
	[0070.246] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.246] malloc (_Size=0x1000) returned 0x32388c8
	[0070.247] _swprintf (in: param_1=0x32388c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0070.247] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.247] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", _SubStr="wasse") returned 0x0
	[0070.247] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", _SubStr="passw") returned 0x0
	[0070.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32388c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644
	[0070.248] SetThreadPriority (hThread=0x644, nPriority=15) returned 1
	[0070.249] malloc (_Size=0x1000) returned 0x32368b8
	[0070.249] _swprintf (in: param_1=0x32368b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0070.249] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.249] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", _SubStr="wasse") returned 0x0
	[0070.249] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", _SubStr="passw") returned 0x0
	[0070.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32368b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648
	[0070.251] SetThreadPriority (hThread=0x648, nPriority=15) returned 1
	[0070.253] malloc (_Size=0x1000) returned 0x32388c8
	[0070.253] _swprintf (in: param_1=0x32388c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0070.253] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.253] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", _SubStr="wasse") returned 0x0
	[0070.253] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", _SubStr="passw") returned 0x0
	[0070.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32388c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c
	[0070.255] SetThreadPriority (hThread=0x64c, nPriority=15) returned 1
	[0070.258] malloc (_Size=0x1000) returned 0x32368b8
	[0070.258] _swprintf (in: param_1=0x32368b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0070.258] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.258] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", _SubStr="wasse") returned 0x0
	[0070.258] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", _SubStr="passw") returned 0x0
	[0070.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32368b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650
	[0070.260] SetThreadPriority (hThread=0x650, nPriority=15) returned 1
	[0070.261] malloc (_Size=0x1000) returned 0x32388c8
	[0070.261] _swprintf (in: param_1=0x32388c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 69
	[0070.261] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.261] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", _SubStr="wasse") returned 0x0
	[0070.261] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", _SubStr="passw") returned 0x0
	[0070.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32388c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654
	[0070.262] SetThreadPriority (hThread=0x654, nPriority=15) returned 1
	[0070.263] malloc (_Size=0x1000) returned 0x32368b8
	[0070.263] _swprintf (in: param_1=0x32368b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0070.263] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.263] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", _SubStr="wasse") returned 0x0
	[0070.263] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", _SubStr="passw") returned 0x0
	[0070.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32368b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658
	[0070.265] SetThreadPriority (hThread=0x658, nPriority=15) returned 1
	[0070.266] malloc (_Size=0x1000) returned 0x32388c8
	[0070.266] _swprintf (in: param_1=0x32388c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg") returned 74
	[0070.266] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.266] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", _SubStr="wasse") returned 0x0
	[0070.266] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", _SubStr="passw") returned 0x0
	[0070.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32388c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c
	[0070.268] SetThreadPriority (hThread=0x65c, nPriority=15) returned 1
	[0070.269] malloc (_Size=0x1000) returned 0x32368b8
	[0070.269] _swprintf (in: param_1=0x32368b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0070.269] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.269] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", _SubStr="wasse") returned 0x0
	[0070.269] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", _SubStr="passw") returned 0x0
	[0070.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32368b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660
	[0070.270] SetThreadPriority (hThread=0x660, nPriority=15) returned 1
	[0070.271] malloc (_Size=0x1000) returned 0x32368b8
	[0070.272] _swprintf (in: param_1=0x32368b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0070.272] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", _SubStr="CoronaVirus") returned 0x0
	[0070.272] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", _SubStr="wasse") returned 0x0
	[0070.272] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", _SubStr="passw") returned 0x0
	[0070.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32368b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664
	[0070.273] SetThreadPriority (hThread=0x664, nPriority=15) returned 1
	[0070.276] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.280] _alloca_probe () returned 0x4036d0
	[0070.280] malloc (_Size=0x1000) returned 0x32368b8
	[0070.280] _swprintf (in: param_1=0x32368b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\CoronaVirus.txt") returned 71
	[0070.280] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.280] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.282] _alloca_probe () returned 0x4036d0
	[0070.282] malloc (_Size=0x1000) returned 0x32388c8
	[0070.282] _swprintf (in: param_1=0x32388c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\CoronaVirus.txt") returned 77
	[0070.282] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.283] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.293] _alloca_probe () returned 0x4036d0
	[0070.293] malloc (_Size=0x1000) returned 0x32398d0
	[0070.293] _swprintf (in: param_1=0x32398d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\CoronaVirus.txt") returned 70
	[0070.293] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.293] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.295] _alloca_probe () returned 0x4036d0
	[0070.295] malloc (_Size=0x1000) returned 0x323a8d8
	[0070.295] _swprintf (in: param_1=0x323a8d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\CoronaVirus.txt") returned 76
	[0070.295] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.296] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.299] _alloca_probe () returned 0x4036d0
	[0070.299] malloc (_Size=0x1000) returned 0x323b8e0
	[0070.299] _swprintf (in: param_1=0x323b8e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VC\\CoronaVirus.txt") returned 65
	[0070.299] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VC\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.299] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.302] _alloca_probe () returned 0x4036d0
	[0070.302] malloc (_Size=0x1000) returned 0x323c8e8
	[0070.302] _swprintf (in: param_1=0x323c8e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\CoronaVirus.txt") returned 66
	[0070.302] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.302] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.306] _alloca_probe () returned 0x4036d0
	[0070.306] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.311] _alloca_probe () returned 0x4036d0
	[0070.311] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.320] _alloca_probe () returned 0x4036d0
	[0070.320] malloc (_Size=0x1000) returned 0x323d8f0
	[0070.320] _swprintf (in: param_1=0x323d8f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\CoronaVirus.txt") returned 77
	[0070.320] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.320] malloc (_Size=0x1000) returned 0x323e8f8
	[0070.320] _swprintf (in: param_1=0x323e8f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\CoronaVirus.txt") returned 72
	[0070.320] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.320] malloc (_Size=0x1000) returned 0x323f900
	[0070.320] _swprintf (in: param_1=0x323f900, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\CoronaVirus.txt") returned 67
	[0070.320] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.321] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\Services\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\services\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.323] _alloca_probe () returned 0x4036d0
	[0070.323] malloc (_Size=0x1000) returned 0x3240908
	[0070.323] _swprintf (in: param_1=0x3240908, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\Services\\CoronaVirus.txt") returned 54
	[0070.323] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.323] malloc (_Size=0x1000) returned 0x3241910
	[0070.323] _swprintf (in: param_1=0x3241910, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0070.323] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\verisign.bmp", _SubStr="CoronaVirus") returned 0x0
	[0070.323] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\verisign.bmp", _SubStr="wasse") returned 0x0
	[0070.323] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\verisign.bmp", _SubStr="passw") returned 0x0
	[0070.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3241910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x514
	[0070.324] SetThreadPriority (hThread=0x514, nPriority=15) returned 1
	[0070.327] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.329] _alloca_probe () returned 0x4036d0
	[0070.329] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\ado\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ado\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.333] _alloca_probe () returned 0x4036d0
	[0070.333] malloc (_Size=0x1000) returned 0x3241910
	[0070.333] _swprintf (in: param_1=0x3241910, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\ado\\CoronaVirus.txt") returned 56
	[0070.333] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\ado\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.333] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.335] _alloca_probe () returned 0x4036d0
	[0070.335] malloc (_Size=0x1000) returned 0x3242918
	[0070.336] _swprintf (in: param_1=0x3242918, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\ado\\en-US\\CoronaVirus.txt") returned 62
	[0070.336] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\ado\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.336] malloc (_Size=0x1000) returned 0x3243920
	[0070.336] _swprintf (in: param_1=0x3243920, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\CoronaVirus.txt") returned 52
	[0070.336] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.336] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.338] _alloca_probe () returned 0x4036d0
	[0070.338] malloc (_Size=0x1000) returned 0x3244928
	[0070.338] _swprintf (in: param_1=0x3244928, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\en-US\\CoronaVirus.txt") returned 58
	[0070.338] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.338] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\msadc\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.342] _alloca_probe () returned 0x4036d0
	[0070.342] malloc (_Size=0x1000) returned 0x3245930
	[0070.342] _swprintf (in: param_1=0x3245930, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\msadc\\CoronaVirus.txt") returned 58
	[0070.342] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\msadc\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.342] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.347] _alloca_probe () returned 0x4036d0
	[0070.347] malloc (_Size=0x1000) returned 0x3246938
	[0070.347] _swprintf (in: param_1=0x3246938, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\CoronaVirus.txt") returned 64
	[0070.347] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.347] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.350] _alloca_probe () returned 0x4036d0
	[0070.350] malloc (_Size=0x1000) returned 0x3247940
	[0070.350] _swprintf (in: param_1=0x3247940, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\Ole DB\\CoronaVirus.txt") returned 59
	[0070.350] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\Ole DB\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.350] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.354] _alloca_probe () returned 0x4036d0
	[0070.354] malloc (_Size=0x1000) returned 0x3248948
	[0070.355] _swprintf (in: param_1=0x3248948, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\CoronaVirus.txt") returned 65
	[0070.355] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.355] malloc (_Size=0x1000) returned 0x3249950
	[0070.355] _swprintf (in: param_1=0x3249950, param_2="%s\\%s" | out: param_1="C:\\Program Files\\CoronaVirus.txt") returned 32
	[0070.355] wcsstr (_Str="C:\\Program Files\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.355] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.357] _alloca_probe () returned 0x4036d0
	[0070.357] malloc (_Size=0x1000) returned 0x324a958
	[0070.357] _swprintf (in: param_1=0x324a958, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\CoronaVirus.txt") returned 50
	[0070.357] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.358] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.365] _alloca_probe () returned 0x4036d0
	[0070.365] malloc (_Size=0x1000) returned 0x324b960
	[0070.365] _swprintf (in: param_1=0x324b960, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\en-US\\CoronaVirus.txt") returned 56
	[0070.365] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.365] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\images\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\images\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.367] _alloca_probe () returned 0x4036d0
	[0070.368] malloc (_Size=0x1000) returned 0x324c968
	[0070.368] _swprintf (in: param_1=0x324c968, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\images\\CoronaVirus.txt") returned 57
	[0070.368] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\images\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.368] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\signup\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.370] _alloca_probe () returned 0x4036d0
	[0070.370] malloc (_Size=0x1000) returned 0x324d970
	[0070.370] _swprintf (in: param_1=0x324d970, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\SIGNUP\\CoronaVirus.txt") returned 57
	[0070.370] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\SIGNUP\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.370] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.372] _alloca_probe () returned 0x4036d0
	[0070.372] malloc (_Size=0x1000) returned 0x324e978
	[0070.372] _swprintf (in: param_1=0x324e978, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\CoronaVirus.txt") returned 37
	[0070.372] wcsstr (_Str="C:\\Program Files\\Java\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.372] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.378] _alloca_probe () returned 0x4036d0
	[0070.378] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.381] _alloca_probe () returned 0x4036d0
	[0070.381] malloc (_Size=0x1000) returned 0x324f980
	[0070.381] _swprintf (in: param_1=0x324f980, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\CoronaVirus.txt") returned 54
	[0070.381] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.381] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.385] _alloca_probe () returned 0x4036d0
	[0070.386] malloc (_Size=0x1000) returned 0x3250988
	[0070.386] _swprintf (in: param_1=0x3250988, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\CoronaVirus.txt") returned 63
	[0070.386] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.389] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.392] _alloca_probe () returned 0x4036d0
	[0070.393] malloc (_Size=0x1000) returned 0x3251990
	[0070.393] _swprintf (in: param_1=0x3251990, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\CoronaVirus.txt") returned 62
	[0070.393] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.393] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.397] _alloca_probe () returned 0x4036d0
	[0070.397] malloc (_Size=0x1000) returned 0x3252998
	[0070.397] _swprintf (in: param_1=0x3252998, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\CoronaVirus.txt") returned 61
	[0070.397] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.397] malloc (_Size=0x1000) returned 0x32539a0
	[0070.397] _swprintf (in: param_1=0x32539a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0070.397] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", _SubStr="CoronaVirus") returned 0x0
	[0070.397] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", _SubStr="wasse") returned 0x0
	[0070.397] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", _SubStr="passw") returned 0x0
	[0070.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32539a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670
	[0070.398] SetThreadPriority (hThread=0x670, nPriority=15) returned 1
	[0070.400] malloc (_Size=0x1000) returned 0x32549a8
	[0070.400] _swprintf (in: param_1=0x32549a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\CoronaVirus.txt") returned 50
	[0070.400] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.400] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.510] _alloca_probe () returned 0x4036d0
	[0070.511] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.515] _alloca_probe () returned 0x4036d0
	[0070.515] malloc (_Size=0x1000) returned 0x32539a0
	[0070.515] _swprintf (in: param_1=0x32539a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\CoronaVirus.txt") returned 60
	[0070.515] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.515] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.520] _alloca_probe () returned 0x4036d0
	[0070.520] malloc (_Size=0x1000) returned 0x32559b0
	[0070.520] _swprintf (in: param_1=0x32559b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\CoronaVirus.txt") returned 61
	[0070.521] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.521] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.525] _alloca_probe () returned 0x4036d0
	[0070.525] malloc (_Size=0x1000) returned 0x32569b8
	[0070.526] _swprintf (in: param_1=0x32569b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CoronaVirus.txt") returned 58
	[0070.526] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.526] malloc (_Size=0x1000) returned 0x32579c0
	[0070.526] _swprintf (in: param_1=0x32579c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\CoronaVirus.txt") returned 54
	[0070.526] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.526] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.531] _alloca_probe () returned 0x4036d0
	[0070.531] malloc (_Size=0x1000) returned 0x32589c8
	[0070.531] _swprintf (in: param_1=0x32589c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\CoronaVirus.txt") returned 61
	[0070.531] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.531] malloc (_Size=0x1000) returned 0x32599d0
	[0070.531] _swprintf (in: param_1=0x32599d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0070.531] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", _SubStr="CoronaVirus") returned 0x0
	[0070.531] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", _SubStr="wasse") returned 0x0
	[0070.531] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", _SubStr="passw") returned 0x0
	[0070.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32599d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678
	[0070.532] SetThreadPriority (hThread=0x678, nPriority=15) returned 1
	[0070.535] malloc (_Size=0x1000) returned 0x325a9d8
	[0070.540] _swprintf (in: param_1=0x325a9d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0070.540] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.540] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", _SubStr="wasse") returned 0x0
	[0070.540] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", _SubStr="passw") returned 0x0
	[0070.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c
	[0070.542] SetThreadPriority (hThread=0x67c, nPriority=15) returned 1
	[0070.543] malloc (_Size=0x1000) returned 0x325b9e0
	[0070.544] _swprintf (in: param_1=0x325b9e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0070.544] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.544] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", _SubStr="wasse") returned 0x0
	[0070.544] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", _SubStr="passw") returned 0x0
	[0070.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325b9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680
	[0070.635] SetThreadPriority (hThread=0x680, nPriority=15) returned 1
	[0070.636] malloc (_Size=0x1000) returned 0x325a9d8
	[0070.637] _swprintf (in: param_1=0x325a9d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0070.637] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.637] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", _SubStr="wasse") returned 0x0
	[0070.637] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", _SubStr="passw") returned 0x0
	[0070.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x688
	[0070.642] SetThreadPriority (hThread=0x688, nPriority=15) returned 1
	[0070.652] malloc (_Size=0x1000) returned 0x325b9e0
	[0070.652] _swprintf (in: param_1=0x325b9e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0070.652] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.652] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", _SubStr="wasse") returned 0x0
	[0070.652] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", _SubStr="passw") returned 0x0
	[0070.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325b9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x68c
	[0070.656] SetThreadPriority (hThread=0x68c, nPriority=15) returned 1
	[0070.658] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.668] _alloca_probe () returned 0x4036d0
	[0070.669] malloc (_Size=0x1000) returned 0x325a9d8
	[0070.669] _swprintf (in: param_1=0x325a9d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\CoronaVirus.txt") returned 58
	[0070.669] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.669] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.673] _alloca_probe () returned 0x4036d0
	[0070.673] malloc (_Size=0x1000) returned 0x325b9e0
	[0070.673] _swprintf (in: param_1=0x325b9e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\CoronaVirus.txt") returned 60
	[0070.673] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.673] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.676] _alloca_probe () returned 0x4036d0
	[0070.676] malloc (_Size=0x1000) returned 0x325c9e8
	[0070.677] _swprintf (in: param_1=0x325c9e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\CoronaVirus.txt") returned 61
	[0070.677] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.677] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.681] _alloca_probe () returned 0x4036d0
	[0070.681] malloc (_Size=0x1000) returned 0x325d9f0
	[0070.681] _swprintf (in: param_1=0x325d9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\CoronaVirus.txt") returned 69
	[0070.681] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.681] malloc (_Size=0x1000) returned 0x325e9f8
	[0070.682] _swprintf (in: param_1=0x325e9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0070.682] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.682] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", _SubStr="wasse") returned 0x0
	[0070.682] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", _SubStr="passw") returned 0x0
	[0070.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325e9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x684
	[0070.682] SetThreadPriority (hThread=0x684, nPriority=15) returned 1
	[0070.685] malloc (_Size=0x1000) returned 0x325fa00
	[0070.685] _swprintf (in: param_1=0x325fa00, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0070.685] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.685] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0070.685] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", _SubStr="passw") returned 0x0
	[0070.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325fa00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x698
	[0070.689] SetThreadPriority (hThread=0x698, nPriority=15) returned 1
	[0070.695] malloc (_Size=0x1000) returned 0x325e9f8
	[0070.696] _swprintf (in: param_1=0x325e9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0070.697] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.700] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0070.700] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", _SubStr="passw") returned 0x0
	[0070.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325e9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x694
	[0070.700] SetThreadPriority (hThread=0x694, nPriority=15) returned 1
	[0070.702] malloc (_Size=0x1000) returned 0x325fa00
	[0070.702] _swprintf (in: param_1=0x325fa00, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0070.703] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.706] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0070.706] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", _SubStr="passw") returned 0x0
	[0070.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325fa00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x69c
	[0070.706] SetThreadPriority (hThread=0x69c, nPriority=15) returned 1
	[0070.709] malloc (_Size=0x1000) returned 0x325e9f8
	[0070.712] _swprintf (in: param_1=0x325e9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0070.712] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.712] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0070.712] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", _SubStr="passw") returned 0x0
	[0070.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325e9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a0
	[0070.715] SetThreadPriority (hThread=0x6a0, nPriority=15) returned 1
	[0070.717] malloc (_Size=0x1000) returned 0x325fa00
	[0070.718] _swprintf (in: param_1=0x325fa00, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0070.718] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.719] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0070.721] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", _SubStr="passw") returned 0x0
	[0070.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325fa00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a4
	[0070.721] SetThreadPriority (hThread=0x6a4, nPriority=15) returned 1
	[0070.724] malloc (_Size=0x1000) returned 0x325e9f8
	[0070.725] _swprintf (in: param_1=0x325e9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0070.728] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0070.728] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0070.728] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", _SubStr="passw") returned 0x0
	[0070.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325e9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a8
	[0070.728] SetThreadPriority (hThread=0x6a8, nPriority=15) returned 1
	[0070.735] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.737] _alloca_probe () returned 0x4036d0
	[0070.737] malloc (_Size=0x1000) returned 0x325e9f8
	[0070.737] _swprintf (in: param_1=0x325e9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\CoronaVirus.txt") returned 58
	[0070.738] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.738] malloc (_Size=0x1000) returned 0x325fa00
	[0070.738] _swprintf (in: param_1=0x325fa00, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0070.738] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", _SubStr="CoronaVirus") returned 0x0
	[0070.738] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", _SubStr="wasse") returned 0x0
	[0070.738] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", _SubStr="passw") returned 0x0
	[0070.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x325fa00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674
	[0070.738] SetThreadPriority (hThread=0x674, nPriority=15) returned 1
	[0070.740] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.751] _alloca_probe () returned 0x4036d0
	[0070.751] malloc (_Size=0x1000) returned 0x325fa00
	[0070.751] _swprintf (in: param_1=0x325fa00, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\CoronaVirus.txt") returned 65
	[0070.752] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.752] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.756] _alloca_probe () returned 0x4036d0
	[0070.756] malloc (_Size=0x1000) returned 0x3260a08
	[0070.757] _swprintf (in: param_1=0x3260a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\CoronaVirus.txt") returned 63
	[0070.757] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.757] malloc (_Size=0x1000) returned 0x3261a10
	[0070.757] _swprintf (in: param_1=0x3261a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0070.757] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", _SubStr="CoronaVirus") returned 0x0
	[0070.757] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", _SubStr="wasse") returned 0x0
	[0070.757] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", _SubStr="passw") returned 0x0
	[0070.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3261a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668
	[0070.757] SetThreadPriority (hThread=0x668, nPriority=15) returned 1
	[0070.761] malloc (_Size=0x1000) returned 0x3262a18
	[0070.765] _swprintf (in: param_1=0x3262a18, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0070.765] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", _SubStr="CoronaVirus") returned 0x0
	[0070.765] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", _SubStr="wasse") returned 0x0
	[0070.765] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", _SubStr="passw") returned 0x0
	[0070.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3262a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b0
	[0070.765] SetThreadPriority (hThread=0x6b0, nPriority=15) returned 1
	[0070.767] malloc (_Size=0x1000) returned 0x3261a10
	[0070.767] _swprintf (in: param_1=0x3261a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0070.767] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", _SubStr="CoronaVirus") returned 0x0
	[0070.767] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", _SubStr="wasse") returned 0x0
	[0070.767] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", _SubStr="passw") returned 0x0
	[0070.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3261a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4
	[0070.767] SetThreadPriority (hThread=0x6b4, nPriority=15) returned 1
	[0070.811] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0070.820] _alloca_probe () returned 0x4036d0
	[0070.820] malloc (_Size=0x1000) returned 0x3263a20
	[0070.820] _swprintf (in: param_1=0x3263a20, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0070.820] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.820] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", _SubStr="wasse") returned 0x0
	[0070.820] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", _SubStr="passw") returned 0x0
	[0070.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3263a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6bc
	[0070.820] SetThreadPriority (hThread=0x6bc, nPriority=15) returned 1
	[0070.824] malloc (_Size=0x1000) returned 0x3264a28
	[0070.830] _swprintf (in: param_1=0x3264a28, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\CoronaVirus.txt") returned 49
	[0070.830] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0070.836] malloc (_Size=0x1000) returned 0x3265a30
	[0070.836] _swprintf (in: param_1=0x3265a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0070.836] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", _SubStr="CoronaVirus") returned 0x0
	[0070.836] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", _SubStr="wasse") returned 0x0
	[0070.836] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", _SubStr="passw") returned 0x0
	[0070.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3265a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c0
	[0070.869] SetThreadPriority (hThread=0x6c0, nPriority=15) returned 1
	[0071.076] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\office16\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0071.250] _alloca_probe () returned 0x4036d0
	[0071.250] malloc (_Size=0x1000) returned 0x3265a30
	[0071.250] _swprintf (in: param_1=0x3265a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\CoronaVirus.txt") returned 58
	[0071.250] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0071.250] malloc (_Size=0x1000) returned 0x3266a38
	[0071.250] _swprintf (in: param_1=0x3266a38, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs") returned 51
	[0071.250] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", _SubStr="CoronaVirus") returned 0x0
	[0071.250] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", _SubStr="wasse") returned 0x0
	[0071.250] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", _SubStr="passw") returned 0x0
	[0071.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3266a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8
	[0071.251] SetThreadPriority (hThread=0x6c8, nPriority=15) returned 1
	[0071.277] malloc (_Size=0x1000) returned 0x3267a40
	[0071.277] _swprintf (in: param_1=0x3267a40, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml") returned 54
	[0071.277] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", _SubStr="CoronaVirus") returned 0x0
	[0071.277] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", _SubStr="wasse") returned 0x0
	[0071.277] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", _SubStr="passw") returned 0x0
	[0071.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3267a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d4
	[0071.278] SetThreadPriority (hThread=0x6d4, nPriority=15) returned 1
	[0071.280] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0072.629] _alloca_probe () returned 0x4036d0
	[0072.676] malloc (_Size=0x1000) returned 0x32599d0
	[0072.676] _swprintf (in: param_1=0x32599d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0072.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0072.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0072.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0072.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32599d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d0
	[0072.677] SetThreadPriority (hThread=0x4d0, nPriority=15) returned 1
	[0072.678] malloc (_Size=0x1000) returned 0x3267a40
	[0072.680] _swprintf (in: param_1=0x3267a40, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0072.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0072.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0072.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0072.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3267a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6ac
	[0072.686] SetThreadPriority (hThread=0x6ac, nPriority=15) returned 1
	[0072.761] malloc (_Size=0x1000) returned 0x3267a40
	[0072.761] _swprintf (in: param_1=0x3267a40, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0072.761] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0072.761] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0072.761] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0072.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3267a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d8
	[0072.761] SetThreadPriority (hThread=0x6d8, nPriority=15) returned 1
	[0072.777] malloc (_Size=0x1000) returned 0x3261a10
	[0072.777] _swprintf (in: param_1=0x3261a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0072.777] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0072.789] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0072.964] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0072.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3261a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d0
	[0072.964] SetThreadPriority (hThread=0x6d0, nPriority=15) returned 1
	[0072.966] malloc (_Size=0x1000) returned 0x3262a18
	[0072.966] _swprintf (in: param_1=0x3262a18, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0072.966] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0072.966] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0072.966] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0072.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3262a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c
	[0072.968] SetThreadPriority (hThread=0x66c, nPriority=15) returned 1
	[0072.980] malloc (_Size=0x1000) returned 0x3261a10
	[0072.980] _swprintf (in: param_1=0x3261a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0072.980] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0072.980] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0072.980] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0072.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3261a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6dc
	[0072.986] SetThreadPriority (hThread=0x6dc, nPriority=15) returned 1
	[0073.076] malloc (_Size=0x1000) returned 0x3261a10
	[0073.076] _swprintf (in: param_1=0x3261a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0073.076] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.076] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.076] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3261a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e8
	[0073.076] SetThreadPriority (hThread=0x6e8, nPriority=15) returned 1
	[0073.078] malloc (_Size=0x1000) returned 0x3263a20
	[0073.078] _swprintf (in: param_1=0x3263a20, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0073.079] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.079] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.079] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3263a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f0
	[0073.091] SetThreadPriority (hThread=0x6f0, nPriority=15) returned 1
	[0073.140] malloc (_Size=0x1000) returned 0x3263a20
	[0073.140] _swprintf (in: param_1=0x3263a20, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0073.140] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.140] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.140] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3263a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f4
	[0073.140] SetThreadPriority (hThread=0x6f4, nPriority=15) returned 1
	[0073.142] malloc (_Size=0x1000) returned 0x3261a10
	[0073.142] _swprintf (in: param_1=0x3261a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0073.142] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.142] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.142] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3261a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6ec
	[0073.149] SetThreadPriority (hThread=0x6ec, nPriority=15) returned 1
	[0073.359] malloc (_Size=0x1000) returned 0x3261a10
	[0073.359] _swprintf (in: param_1=0x3261a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0073.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3261a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f8
	[0073.360] SetThreadPriority (hThread=0x6f8, nPriority=15) returned 1
	[0073.361] malloc (_Size=0x1000) returned 0x3268c68
	[0073.369] _swprintf (in: param_1=0x3268c68, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0073.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3268c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x704
	[0073.407] SetThreadPriority (hThread=0x704, nPriority=15) returned 1
	[0073.453] malloc (_Size=0x1000) returned 0x3269e90
	[0073.453] _swprintf (in: param_1=0x3269e90, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0073.453] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.453] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.453] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3269e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x70c
	[0073.453] SetThreadPriority (hThread=0x70c, nPriority=15) returned 1
	[0073.455] malloc (_Size=0x1000) returned 0x326b0b8
	[0073.456] _swprintf (in: param_1=0x326b0b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0073.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x326b0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718
	[0073.456] SetThreadPriority (hThread=0x718, nPriority=15) returned 1
	[0073.458] malloc (_Size=0x1000) returned 0x326f210
	[0073.459] _swprintf (in: param_1=0x326f210, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0073.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x326f210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x724
	[0073.460] SetThreadPriority (hThread=0x724, nPriority=15) returned 1
	[0073.462] malloc (_Size=0x1000) returned 0x3270438
	[0073.462] _swprintf (in: param_1=0x3270438, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0073.462] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.462] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.462] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3270438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x730
	[0073.463] SetThreadPriority (hThread=0x730, nPriority=15) returned 1
	[0073.464] malloc (_Size=0x1000) returned 0x3273848
	[0073.465] _swprintf (in: param_1=0x3273848, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0073.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3273848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x73c
	[0073.466] SetThreadPriority (hThread=0x73c, nPriority=15) returned 1
	[0073.467] malloc (_Size=0x1000) returned 0x3274850
	[0073.991] _swprintf (in: param_1=0x3274850, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0073.991] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.991] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.991] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x710
	[0073.992] SetThreadPriority (hThread=0x710, nPriority=15) returned 1
	[0073.994] malloc (_Size=0x1000) returned 0x3273848
	[0073.994] _swprintf (in: param_1=0x3273848, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0073.994] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0073.994] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0073.994] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0073.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3273848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x71c
	[0073.998] SetThreadPriority (hThread=0x71c, nPriority=15) returned 1
	[0074.069] malloc (_Size=0x1000) returned 0x3277890
	[0074.080] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0074.080] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x728
	[0074.081] SetThreadPriority (hThread=0x728, nPriority=15) returned 1
	[0074.083] malloc (_Size=0x1000) returned 0x3274878
	[0074.083] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0074.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x734
	[0074.087] SetThreadPriority (hThread=0x734, nPriority=15) returned 1
	[0074.089] malloc (_Size=0x1000) returned 0x327c8b8
	[0074.090] _swprintf (in: param_1=0x327c8b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0074.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327c8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x720
	[0074.090] SetThreadPriority (hThread=0x720, nPriority=15) returned 1
	[0074.105] malloc (_Size=0x1000) returned 0x3275880
	[0074.105] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0074.162] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.162] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.166] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x714
	[0074.167] SetThreadPriority (hThread=0x714, nPriority=15) returned 1
	[0074.464] malloc (_Size=0x1000) returned 0x327d8c0
	[0074.464] _swprintf (in: param_1=0x327d8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0074.464] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.464] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.464] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327d8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x740
	[0074.464] SetThreadPriority (hThread=0x740, nPriority=15) returned 1
	[0074.467] malloc (_Size=0x1000) returned 0x3278898
	[0074.467] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0074.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x738
	[0074.639] SetThreadPriority (hThread=0x738, nPriority=15) returned 1
	[0074.642] malloc (_Size=0x1000) returned 0x32798a0
	[0074.642] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0074.642] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.642] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.642] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6fc
	[0074.646] SetThreadPriority (hThread=0x6fc, nPriority=15) returned 1
	[0074.651] malloc (_Size=0x1000) returned 0x327b8b0
	[0074.651] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0074.651] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0074.651] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0074.651] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0074.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x72c
	[0075.067] SetThreadPriority (hThread=0x72c, nPriority=15) returned 1
	[0075.069] malloc (_Size=0x1000) returned 0x32798a0
	[0075.069] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0075.069] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e0
	[0075.071] SetThreadPriority (hThread=0x6e0, nPriority=15) returned 1
	[0075.088] malloc (_Size=0x1000) returned 0x3277890
	[0075.088] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0075.099] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.099] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.099] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e4
	[0075.162] SetThreadPriority (hThread=0x6e4, nPriority=15) returned 1
	[0075.164] malloc (_Size=0x1000) returned 0x3278898
	[0075.164] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0075.164] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.164] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.164] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b8
	[0075.166] SetThreadPriority (hThread=0x6b8, nPriority=15) returned 1
	[0075.174] malloc (_Size=0x1000) returned 0x3278898
	[0075.177] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0075.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc
	[0075.178] SetThreadPriority (hThread=0x6cc, nPriority=15) returned 1
	[0075.180] malloc (_Size=0x1000) returned 0x327a8a8
	[0075.180] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0075.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x690
	[0075.259] SetThreadPriority (hThread=0x690, nPriority=15) returned 1
	[0075.261] malloc (_Size=0x1000) returned 0x3275880
	[0075.261] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0075.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x708
	[0075.264] SetThreadPriority (hThread=0x708, nPriority=15) returned 1
	[0075.270] malloc (_Size=0x1000) returned 0x3277890
	[0075.270] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0075.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700
	[0075.364] SetThreadPriority (hThread=0x700, nPriority=15) returned 1
	[0075.377] malloc (_Size=0x1000) returned 0x327a8a8
	[0075.381] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0075.381] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.390] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.390] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748
	[0075.391] SetThreadPriority (hThread=0x748, nPriority=15) returned 1
	[0075.396] malloc (_Size=0x1000) returned 0x3274878
	[0075.396] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0075.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c
	[0075.397] SetThreadPriority (hThread=0x74c, nPriority=15) returned 1
	[0075.408] malloc (_Size=0x1000) returned 0x32798a0
	[0075.408] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744
	[0075.447] SetThreadPriority (hThread=0x744, nPriority=15) returned 1
	[0075.517] malloc (_Size=0x1000) returned 0x327b8b0
	[0075.517] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0075.517] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.517] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0075.517] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0075.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x758
	[0075.517] SetThreadPriority (hThread=0x758, nPriority=15) returned 1
	[0075.522] malloc (_Size=0x1000) returned 0x327c8b8
	[0075.522] _swprintf (in: param_1=0x327c8b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0075.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", _SubStr="wasse") returned 0x0
	[0075.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", _SubStr="passw") returned 0x0
	[0075.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327c8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x754
	[0075.526] SetThreadPriority (hThread=0x754, nPriority=15) returned 1
	[0075.528] malloc (_Size=0x1000) returned 0x327a8a8
	[0075.528] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0075.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0075.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0075.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x764
	[0075.540] SetThreadPriority (hThread=0x764, nPriority=15) returned 1
	[0075.708] malloc (_Size=0x1000) returned 0x3275880
	[0075.708] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0075.708] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0075.708] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0075.708] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0075.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750
	[0076.048] SetThreadPriority (hThread=0x750, nPriority=15) returned 1
	[0076.052] malloc (_Size=0x1000) returned 0x3277890
	[0076.052] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 133
	[0076.055] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.055] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.055] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x760
	[0076.056] SetThreadPriority (hThread=0x760, nPriority=15) returned 1
	[0076.140] malloc (_Size=0x1000) returned 0x32798a0
	[0076.140] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 133
	[0076.140] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.140] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.140] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x768
	[0076.141] SetThreadPriority (hThread=0x768, nPriority=15) returned 1
	[0076.146] malloc (_Size=0x1000) returned 0x327a8a8
	[0076.146] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 133
	[0076.146] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.146] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.146] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c
	[0076.159] SetThreadPriority (hThread=0x76c, nPriority=15) returned 1
	[0076.333] malloc (_Size=0x1000) returned 0x3278898
	[0076.333] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 133
	[0076.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x770
	[0076.334] SetThreadPriority (hThread=0x770, nPriority=15) returned 1
	[0076.336] malloc (_Size=0x1000) returned 0x3276888
	[0076.337] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 133
	[0076.338] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.342] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.342] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x774
	[0076.342] SetThreadPriority (hThread=0x774, nPriority=15) returned 1
	[0076.445] malloc (_Size=0x1000) returned 0x327a8a8
	[0076.445] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 133
	[0076.445] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.445] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.445] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778
	[0076.446] SetThreadPriority (hThread=0x778, nPriority=15) returned 1
	[0076.459] malloc (_Size=0x1000) returned 0x3275880
	[0076.459] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 133
	[0076.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x77c
	[0076.460] SetThreadPriority (hThread=0x77c, nPriority=15) returned 1
	[0076.463] malloc (_Size=0x1000) returned 0x3274878
	[0076.463] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 133
	[0076.469] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x780
	[0076.520] SetThreadPriority (hThread=0x780, nPriority=15) returned 1
	[0076.523] malloc (_Size=0x1000) returned 0x327a8a8
	[0076.527] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 133
	[0076.527] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.527] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.527] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x784
	[0076.528] SetThreadPriority (hThread=0x784, nPriority=15) returned 1
	[0076.536] malloc (_Size=0x1000) returned 0x3278898
	[0076.536] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 133
	[0076.536] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.542] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.542] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x788
	[0076.793] SetThreadPriority (hThread=0x788, nPriority=15) returned 1
	[0076.801] malloc (_Size=0x1000) returned 0x3277890
	[0076.805] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 133
	[0076.805] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0076.805] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0076.805] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0076.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x78c
	[0076.806] SetThreadPriority (hThread=0x78c, nPriority=15) returned 1
	[0077.017] malloc (_Size=0x1000) returned 0x327b8b0
	[0077.017] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 133
	[0077.017] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.017] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.017] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x790
	[0077.018] SetThreadPriority (hThread=0x790, nPriority=15) returned 1
	[0077.022] malloc (_Size=0x1000) returned 0x3277890
	[0077.022] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 133
	[0077.023] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.025] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.025] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x798
	[0077.027] SetThreadPriority (hThread=0x798, nPriority=15) returned 1
	[0077.029] malloc (_Size=0x1000) returned 0x3278898
	[0077.031] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 133
	[0077.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x79c
	[0077.032] SetThreadPriority (hThread=0x79c, nPriority=15) returned 1
	[0077.044] malloc (_Size=0x1000) returned 0x3277890
	[0077.044] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 133
	[0077.044] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.044] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.044] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a0
	[0077.046] SetThreadPriority (hThread=0x7a0, nPriority=15) returned 1
	[0077.316] malloc (_Size=0x1000) returned 0x3277890
	[0077.316] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 133
	[0077.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x75c
	[0077.316] SetThreadPriority (hThread=0x75c, nPriority=15) returned 1
	[0077.343] malloc (_Size=0x1000) returned 0x3278898
	[0077.343] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 133
	[0077.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.362] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.362] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x794
	[0077.419] SetThreadPriority (hThread=0x794, nPriority=15) returned 1
	[0077.423] malloc (_Size=0x1000) returned 0x3277890
	[0077.423] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 133
	[0077.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.427] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.428] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a4
	[0077.428] SetThreadPriority (hThread=0x7a4, nPriority=15) returned 1
	[0077.430] malloc (_Size=0x1000) returned 0x3275880
	[0077.431] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 133
	[0077.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ac
	[0077.432] SetThreadPriority (hThread=0x7ac, nPriority=15) returned 1
	[0077.503] malloc (_Size=0x1000) returned 0x3276888
	[0077.503] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 133
	[0077.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b0
	[0077.513] SetThreadPriority (hThread=0x7b0, nPriority=15) returned 1
	[0077.519] malloc (_Size=0x1000) returned 0x32798a0
	[0077.519] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 133
	[0077.520] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.521] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.524] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b4
	[0077.524] SetThreadPriority (hThread=0x7b4, nPriority=15) returned 1
	[0077.529] malloc (_Size=0x1000) returned 0x3278898
	[0077.535] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 133
	[0077.535] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.535] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.540] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a8
	[0077.601] SetThreadPriority (hThread=0x7a8, nPriority=15) returned 1
	[0077.604] malloc (_Size=0x1000) returned 0x3275880
	[0077.605] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 133
	[0077.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b8
	[0077.609] SetThreadPriority (hThread=0x7b8, nPriority=15) returned 1
	[0077.617] malloc (_Size=0x1000) returned 0x327a8a8
	[0077.625] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 133
	[0077.625] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.629] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.629] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7bc
	[0077.630] SetThreadPriority (hThread=0x7bc, nPriority=15) returned 1
	[0077.634] malloc (_Size=0x1000) returned 0x3276888
	[0077.634] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 133
	[0077.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c4
	[0077.642] SetThreadPriority (hThread=0x7c4, nPriority=15) returned 1
	[0077.652] malloc (_Size=0x1000) returned 0x327a8a8
	[0077.652] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 133
	[0077.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c8
	[0077.653] SetThreadPriority (hThread=0x7c8, nPriority=15) returned 1
	[0077.655] malloc (_Size=0x1000) returned 0x3275880
	[0077.658] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 133
	[0077.658] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.658] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.658] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7cc
	[0077.662] SetThreadPriority (hThread=0x7cc, nPriority=15) returned 1
	[0077.672] malloc (_Size=0x1000) returned 0x32798a0
	[0077.672] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 133
	[0077.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c0
	[0077.673] SetThreadPriority (hThread=0x7c0, nPriority=15) returned 1
	[0077.684] malloc (_Size=0x1000) returned 0x3274878
	[0077.684] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 133
	[0077.684] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.700] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.700] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d0
	[0077.761] SetThreadPriority (hThread=0x7d0, nPriority=15) returned 1
	[0077.768] malloc (_Size=0x1000) returned 0x3275880
	[0077.768] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 133
	[0077.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d4
	[0077.769] SetThreadPriority (hThread=0x7d4, nPriority=15) returned 1
	[0077.771] malloc (_Size=0x1000) returned 0x3278898
	[0077.772] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 133
	[0077.773] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d8
	[0077.777] SetThreadPriority (hThread=0x7d8, nPriority=15) returned 1
	[0077.779] malloc (_Size=0x1000) returned 0x3275880
	[0077.786] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 133
	[0077.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7dc
	[0077.786] SetThreadPriority (hThread=0x7dc, nPriority=15) returned 1
	[0077.790] malloc (_Size=0x1000) returned 0x3277890
	[0077.790] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 133
	[0077.794] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.794] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.794] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e0
	[0077.795] SetThreadPriority (hThread=0x7e0, nPriority=15) returned 1
	[0077.797] malloc (_Size=0x1000) returned 0x3274878
	[0077.798] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 133
	[0077.799] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.799] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.812] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e4
	[0077.813] SetThreadPriority (hThread=0x7e4, nPriority=15) returned 1
	[0077.815] malloc (_Size=0x1000) returned 0x32798a0
	[0077.817] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 133
	[0077.817] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.817] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.817] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ec
	[0077.819] SetThreadPriority (hThread=0x7ec, nPriority=15) returned 1
	[0077.828] malloc (_Size=0x1000) returned 0x3275880
	[0077.828] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 133
	[0077.828] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.828] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.828] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f0
	[0077.829] SetThreadPriority (hThread=0x7f0, nPriority=15) returned 1
	[0077.834] malloc (_Size=0x1000) returned 0x3277890
	[0077.842] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 133
	[0077.858] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0077.858] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0077.879] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0077.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e8
	[0078.043] SetThreadPriority (hThread=0x7e8, nPriority=15) returned 1
	[0078.046] malloc (_Size=0x1000) returned 0x327a8a8
	[0078.049] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 133
	[0078.049] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.049] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.049] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f4
	[0078.050] SetThreadPriority (hThread=0x7f4, nPriority=15) returned 1
	[0078.053] malloc (_Size=0x1000) returned 0x3274878
	[0078.054] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 103
	[0078.054] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.055] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="wasse") returned 0x0
	[0078.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="passw") returned 0x0
	[0078.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f8
	[0078.057] SetThreadPriority (hThread=0x7f8, nPriority=15) returned 1
	[0078.065] malloc (_Size=0x1000) returned 0x32798a0
	[0078.065] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 105
	[0078.071] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.071] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0078.071] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0078.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7fc
	[0078.439] SetThreadPriority (hThread=0x7fc, nPriority=15) returned 1
	[0078.443] malloc (_Size=0x1000) returned 0x3274878
	[0078.444] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 102
	[0078.444] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.446] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0078.446] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0078.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x808
	[0078.446] SetThreadPriority (hThread=0x808, nPriority=15) returned 1
	[0078.498] malloc (_Size=0x1000) returned 0x3276888
	[0078.498] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 162
	[0078.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x80c
	[0078.499] SetThreadPriority (hThread=0x80c, nPriority=15) returned 1
	[0078.503] malloc (_Size=0x1000) returned 0x3278898
	[0078.503] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 162
	[0078.509] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.509] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x810
	[0078.572] SetThreadPriority (hThread=0x810, nPriority=15) returned 1
	[0078.591] malloc (_Size=0x1000) returned 0x3274878
	[0078.591] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 162
	[0078.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x814
	[0078.592] SetThreadPriority (hThread=0x814, nPriority=15) returned 1
	[0078.623] malloc (_Size=0x1000) returned 0x32798a0
	[0078.643] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 162
	[0078.643] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.643] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.684] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x818
	[0078.780] SetThreadPriority (hThread=0x818, nPriority=15) returned 1
	[0078.782] malloc (_Size=0x1000) returned 0x3278898
	[0078.783] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 162
	[0078.784] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x804
	[0078.786] SetThreadPriority (hThread=0x804, nPriority=15) returned 1
	[0078.792] malloc (_Size=0x1000) returned 0x327a8a8
	[0078.798] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 162
	[0078.798] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.803] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.803] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x81c
	[0078.984] SetThreadPriority (hThread=0x81c, nPriority=15) returned 1
	[0078.995] malloc (_Size=0x1000) returned 0x327a8a8
	[0078.995] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 162
	[0078.996] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0078.996] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0078.996] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0078.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x820
	[0078.996] SetThreadPriority (hThread=0x820, nPriority=15) returned 1
	[0079.005] malloc (_Size=0x1000) returned 0x3274878
	[0079.010] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 162
	[0079.010] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.010] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.010] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x824
	[0079.090] SetThreadPriority (hThread=0x824, nPriority=15) returned 1
	[0079.093] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.094] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.096] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.096] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.096] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.096] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.096] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.096] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.096] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.096] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.096] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.096] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.096] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.097] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.097] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.097] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.097] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.097] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.097] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.097] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.097] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.097] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.097] malloc (_Size=0x1000) returned 0x32798a0
	[0079.097] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 162
	[0079.097] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.097] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.097] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x828
	[0079.097] SetThreadPriority (hThread=0x828, nPriority=15) returned 1
	[0079.108] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.113] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.113] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.113] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.119] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.119] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.119] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.119] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.130] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.130] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.130] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.277] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.301] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.301] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.301] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.301] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.301] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.301] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.301] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.301] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.301] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.302] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.302] malloc (_Size=0x1000) returned 0x327a8a8
	[0079.302] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 162
	[0079.302] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.302] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.302] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x830
	[0079.302] SetThreadPriority (hThread=0x830, nPriority=15) returned 1
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.316] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.316] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.316] malloc (_Size=0x1000) returned 0x32798a0
	[0079.316] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 162
	[0079.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x834
	[0079.317] SetThreadPriority (hThread=0x834, nPriority=15) returned 1
	[0079.324] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.330] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.330] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.336] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.346] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.346] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.346] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.346] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.367] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.367] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.367] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.458] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.459] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.459] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.459] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.459] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.459] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.459] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.459] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.459] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.459] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.459] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.459] malloc (_Size=0x1000) returned 0x327b8b0
	[0079.460] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 162
	[0079.460] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.460] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.460] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x82c
	[0079.460] SetThreadPriority (hThread=0x82c, nPriority=15) returned 1
	[0079.462] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.463] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.653] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.653] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.653] malloc (_Size=0x1000) returned 0x3277890
	[0079.653] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 162
	[0079.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x838
	[0079.654] SetThreadPriority (hThread=0x838, nPriority=15) returned 1
	[0079.656] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.657] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.658] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.658] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.660] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.660] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.661] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.661] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.661] malloc (_Size=0x1000) returned 0x327b8b0
	[0079.661] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 162
	[0079.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x83c
	[0079.661] SetThreadPriority (hThread=0x83c, nPriority=15) returned 1
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.665] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.665] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.666] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.667] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.667] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.667] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.667] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.667] malloc (_Size=0x1000) returned 0x3277890
	[0079.667] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 162
	[0079.669] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.669] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.669] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x840
	[0079.669] SetThreadPriority (hThread=0x840, nPriority=15) returned 1
	[0079.673] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.676] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.676] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.676] malloc (_Size=0x1000) returned 0x3276888
	[0079.676] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 162
	[0079.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x844
	[0079.677] SetThreadPriority (hThread=0x844, nPriority=15) returned 1
	[0079.680] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.680] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.686] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.692] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.692] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.692] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.692] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.702] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.702] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.702] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.702] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.719] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.719] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.722] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.722] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.722] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.722] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.722] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.722] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.722] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.722] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.722] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.722] malloc (_Size=0x1000) returned 0x3276888
	[0079.722] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 162
	[0079.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x848
	[0079.723] SetThreadPriority (hThread=0x848, nPriority=15) returned 1
	[0079.725] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.726] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.726] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.727] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.729] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.729] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.729] malloc (_Size=0x1000) returned 0x3278898
	[0079.729] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 162
	[0079.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c
	[0079.730] SetThreadPriority (hThread=0x84c, nPriority=15) returned 1
	[0079.732] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.736] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.736] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.736] malloc (_Size=0x1000) returned 0x327a8a8
	[0079.736] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 162
	[0079.736] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.736] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x850
	[0079.737] SetThreadPriority (hThread=0x850, nPriority=15) returned 1
	[0079.741] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.747] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.747] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.747] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.764] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.764] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.764] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.764] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.764] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.764] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.764] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.764] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.785] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.785] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.802] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.802] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.802] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.802] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.802] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.802] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.802] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.803] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.803] malloc (_Size=0x1000) returned 0x3278898
	[0079.803] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 162
	[0079.803] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.803] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.803] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x854
	[0079.807] SetThreadPriority (hThread=0x854, nPriority=15) returned 1
	[0079.809] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.813] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.813] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.813] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.813] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.815] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.815] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.815] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.815] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.815] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.815] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.816] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.816] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.816] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.816] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.816] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.816] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.816] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.816] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.816] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.816] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.816] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.816] malloc (_Size=0x1000) returned 0x3276888
	[0079.816] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 162
	[0079.816] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.816] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.816] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x858
	[0079.816] SetThreadPriority (hThread=0x858, nPriority=15) returned 1
	[0079.821] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.827] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.833] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.833] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.833] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.845] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.845] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.845] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.845] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.845] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.845] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.996] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.996] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.996] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.996] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.996] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.996] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.996] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.996] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.996] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.996] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0079.996] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.996] malloc (_Size=0x1000) returned 0x3277890
	[0079.996] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 162
	[0079.996] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.996] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0079.996] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0079.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x85c
	[0079.997] SetThreadPriority (hThread=0x85c, nPriority=15) returned 1
	[0080.000] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.000] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.001] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.001] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.002] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.004] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.004] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.004] malloc (_Size=0x1000) returned 0x3274878
	[0080.004] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 162
	[0080.004] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.004] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.004] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860
	[0080.005] SetThreadPriority (hThread=0x860, nPriority=15) returned 1
	[0080.007] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.007] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.021] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.021] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.021] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.021] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.021] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.022] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.026] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.026] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.026] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.026] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.026] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.026] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.026] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.026] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.026] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.026] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.026] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.026] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.026] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.026] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.026] malloc (_Size=0x1000) returned 0x3276888
	[0080.026] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 162
	[0080.026] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.026] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.026] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864
	[0080.027] SetThreadPriority (hThread=0x864, nPriority=15) returned 1
	[0080.029] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.030] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.030] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.031] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.032] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.034] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.034] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.034] malloc (_Size=0x1000) returned 0x3274878
	[0080.034] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 162
	[0080.034] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.034] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.034] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x868
	[0080.035] SetThreadPriority (hThread=0x868, nPriority=15) returned 1
	[0080.038] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.038] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.038] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.041] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.041] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.041] malloc (_Size=0x1000) returned 0x327b8b0
	[0080.041] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 162
	[0080.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.042] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x86c
	[0080.042] SetThreadPriority (hThread=0x86c, nPriority=15) returned 1
	[0080.044] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.046] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.046] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.047] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.049] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.049] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.049] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.050] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.050] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.050] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.050] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.050] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.050] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.050] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.050] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.050] malloc (_Size=0x1000) returned 0x3277890
	[0080.050] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 162
	[0080.050] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.050] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.050] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x870
	[0080.050] SetThreadPriority (hThread=0x870, nPriority=15) returned 1
	[0080.056] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.056] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.056] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.056] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.056] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.057] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.057] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.057] malloc (_Size=0x1000) returned 0x3274878
	[0080.057] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 162
	[0080.057] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.057] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.057] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x874
	[0080.058] SetThreadPriority (hThread=0x874, nPriority=15) returned 1
	[0080.062] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.068] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.068] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.068] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.073] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.073] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.214] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.214] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.214] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.214] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.214] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.214] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.214] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.214] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.214] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.214] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.214] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.214] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.214] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.215] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.215] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.215] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.215] malloc (_Size=0x1000) returned 0x32798a0
	[0080.215] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 162
	[0080.215] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.215] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.215] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x878
	[0080.215] SetThreadPriority (hThread=0x878, nPriority=15) returned 1
	[0080.217] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.219] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.221] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.221] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.221] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.221] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.221] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.221] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.221] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.221] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.221] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.221] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.221] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.221] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.222] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.222] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.222] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.222] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.222] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.222] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.222] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.222] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.222] malloc (_Size=0x1000) returned 0x32798a0
	[0080.222] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 162
	[0080.222] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.222] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.222] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x87c
	[0080.222] SetThreadPriority (hThread=0x87c, nPriority=15) returned 1
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.227] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.227] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.227] malloc (_Size=0x1000) returned 0x3275880
	[0080.227] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 162
	[0080.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x884
	[0080.228] SetThreadPriority (hThread=0x884, nPriority=15) returned 1
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.240] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.240] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.240] malloc (_Size=0x1000) returned 0x3278898
	[0080.240] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 162
	[0080.240] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.241] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.241] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x888
	[0080.241] SetThreadPriority (hThread=0x888, nPriority=15) returned 1
	[0080.243] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.245] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.245] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.245] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.246] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.246] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.248] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.248] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.248] malloc (_Size=0x1000) returned 0x327b8b0
	[0080.248] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 162
	[0080.248] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.248] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.248] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x880
	[0080.249] SetThreadPriority (hThread=0x880, nPriority=15) returned 1
	[0080.251] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.252] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.252] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.255] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.255] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.255] malloc (_Size=0x1000) returned 0x32798a0
	[0080.255] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 162
	[0080.255] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.255] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.255] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x88c
	[0080.256] SetThreadPriority (hThread=0x88c, nPriority=15) returned 1
	[0080.259] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.260] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.262] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.262] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.262] malloc (_Size=0x1000) returned 0x3277890
	[0080.263] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 162
	[0080.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x890
	[0080.263] SetThreadPriority (hThread=0x890, nPriority=15) returned 1
	[0080.265] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.265] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.266] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.266] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.266] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.267] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.269] malloc (_Size=0x1000) returned 0x3275880
	[0080.269] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 162
	[0080.269] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.269] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.269] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x894
	[0080.270] SetThreadPriority (hThread=0x894, nPriority=15) returned 1
	[0080.276] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.282] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.282] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.282] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.293] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.293] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.293] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.293] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.293] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.293] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.293] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.362] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.362] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.362] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.362] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.362] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.362] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.362] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.362] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.363] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.363] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.363] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.363] malloc (_Size=0x1000) returned 0x3274878
	[0080.363] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 162
	[0080.363] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.363] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.363] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x898
	[0080.417] SetThreadPriority (hThread=0x898, nPriority=15) returned 1
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.423] _wcslwr (in: _String=0x31776ca | out: _String=".xml") returned=".xml"
	[0080.423] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.423] malloc (_Size=0x1000) returned 0x327b8b0
	[0080.423] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 162
	[0080.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0080.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0080.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x89c
	[0080.424] SetThreadPriority (hThread=0x89c, nPriority=15) returned 1
	[0080.429] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.429] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.430] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.432] _wcslwr (in: _String=0x317768e | out: _String=".xml") returned=".xml"
	[0080.432] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.432] malloc (_Size=0x1000) returned 0x327b8b0
	[0080.433] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 132
	[0080.433] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.433] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="wasse") returned 0x0
	[0080.433] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="passw") returned 0x0
	[0080.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a0
	[0080.433] SetThreadPriority (hThread=0x8a0, nPriority=15) returned 1
	[0080.435] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.445] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.446] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.446] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.456] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.456] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.456] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.456] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.477] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.905] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.905] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.905] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.905] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.905] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.905] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.905] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.905] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.905] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.905] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.905] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.905] _wcslwr (in: _String=0x3177692 | out: _String=".xml") returned=".xml"
	[0080.905] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.905] malloc (_Size=0x1000) returned 0x327b8b0
	[0080.905] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 134
	[0080.905] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.905] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0080.905] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0080.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4
	[0080.906] SetThreadPriority (hThread=0x8a4, nPriority=15) returned 1
	[0080.913] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.913] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.913] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.913] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.913] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.913] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.913] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.913] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.913] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.913] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.913] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.913] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.913] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.914] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.914] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.914] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.914] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.914] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.914] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.914] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.914] _wcslwr (in: _String=0x317768c | out: _String=".xml") returned=".xml"
	[0080.914] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.914] malloc (_Size=0x1000) returned 0x32798a0
	[0080.914] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 131
	[0080.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0080.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0080.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a8
	[0080.914] SetThreadPriority (hThread=0x8a8, nPriority=15) returned 1
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.004] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.004] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.004] malloc (_Size=0x1000) returned 0x3275880
	[0081.004] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 191
	[0081.004] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.004] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.005] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ac
	[0081.005] SetThreadPriority (hThread=0x8ac, nPriority=15) returned 1
	[0081.007] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.021] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.079] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.079] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.079] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.079] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.080] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.080] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.080] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.080] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.080] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.080] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.080] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.080] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.081] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.082] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.082] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.082] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.082] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.086] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.086] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.086] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.086] malloc (_Size=0x1000) returned 0x32798a0
	[0081.086] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 191
	[0081.086] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.086] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.086] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b0
	[0081.086] SetThreadPriority (hThread=0x8b0, nPriority=15) returned 1
	[0081.088] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.090] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.090] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.092] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.092] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.093] malloc (_Size=0x1000) returned 0x3276888
	[0081.093] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 191
	[0081.093] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.093] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.093] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b4
	[0081.093] SetThreadPriority (hThread=0x8b4, nPriority=15) returned 1
	[0081.095] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.106] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.106] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.106] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.117] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.117] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.117] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.117] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.117] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.117] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.231] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.231] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.231] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.231] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.270] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.270] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.270] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.270] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.270] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.270] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.270] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.270] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.270] malloc (_Size=0x1000) returned 0x32798a0
	[0081.270] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 191
	[0081.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b8
	[0081.271] SetThreadPriority (hThread=0x8b8, nPriority=15) returned 1
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.280] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.280] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.280] malloc (_Size=0x1000) returned 0x327a8a8
	[0081.280] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 191
	[0081.280] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.280] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.280] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc
	[0081.281] SetThreadPriority (hThread=0x8bc, nPriority=15) returned 1
	[0081.294] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.305] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.305] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.305] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.305] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.464] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.464] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.464] malloc (_Size=0x1000) returned 0x3277890
	[0081.464] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 191
	[0081.464] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.464] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.464] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0
	[0081.465] SetThreadPriority (hThread=0x8c0, nPriority=15) returned 1
	[0081.466] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.467] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.467] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.468] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.468] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.469] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.469] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.469] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.469] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.469] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.469] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.470] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.470] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.470] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.470] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.470] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.471] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.471] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.471] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.471] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.471] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.471] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.471] malloc (_Size=0x1000) returned 0x3278898
	[0081.471] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 191
	[0081.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c4
	[0081.471] SetThreadPriority (hThread=0x8c4, nPriority=15) returned 1
	[0081.473] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.478] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.484] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.484] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.494] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.494] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.494] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.515] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.515] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.516] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.518] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.518] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.518] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.518] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.518] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.518] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.518] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.518] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.518] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.518] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.518] malloc (_Size=0x1000) returned 0x327a8a8
	[0081.518] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 191
	[0081.518] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.518] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.518] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c8
	[0081.519] SetThreadPriority (hThread=0x8c8, nPriority=15) returned 1
	[0081.521] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.522] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.524] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.524] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.525] malloc (_Size=0x1000) returned 0x3277890
	[0081.525] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 191
	[0081.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8cc
	[0081.578] SetThreadPriority (hThread=0x8cc, nPriority=15) returned 1
	[0081.579] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.579] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.585] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.585] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.585] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.590] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.590] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.590] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.601] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.601] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.601] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.601] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.621] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.621] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.765] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.765] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.765] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.765] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.766] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.766] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.766] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.766] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.766] malloc (_Size=0x1000) returned 0x3274878
	[0081.766] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 191
	[0081.766] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.766] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.766] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d4
	[0081.766] SetThreadPriority (hThread=0x8d4, nPriority=15) returned 1
	[0081.778] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.778] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.778] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.778] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.778] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.779] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.779] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.779] malloc (_Size=0x1000) returned 0x3274878
	[0081.779] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 191
	[0081.779] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.779] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.779] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d8
	[0081.779] SetThreadPriority (hThread=0x8d8, nPriority=15) returned 1
	[0081.786] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.792] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.792] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.792] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.802] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.802] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.802] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.802] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.823] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.863] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.863] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.913] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.913] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.913] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.913] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.913] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.913] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.913] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.913] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.913] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.913] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.913] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.913] malloc (_Size=0x1000) returned 0x327a8a8
	[0081.913] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 191
	[0081.913] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.913] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.913] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8dc
	[0081.914] SetThreadPriority (hThread=0x8dc, nPriority=15) returned 1
	[0081.917] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.917] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.919] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.919] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.919] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.919] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.919] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.919] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.919] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.919] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.920] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.920] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.920] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.920] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0081.920] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.920] malloc (_Size=0x1000) returned 0x3275880
	[0081.920] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 191
	[0081.920] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.920] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0081.920] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0081.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d0
	[0081.920] SetThreadPriority (hThread=0x8d0, nPriority=15) returned 1
	[0082.028] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.028] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.028] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.028] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.028] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.028] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.028] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.028] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.029] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.029] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.029] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.029] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.029] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.029] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.029] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.029] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.029] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.029] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.029] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.029] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.029] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.029] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.029] malloc (_Size=0x1000) returned 0x3274878
	[0082.029] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 191
	[0082.029] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.029] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.029] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e0
	[0082.030] SetThreadPriority (hThread=0x8e0, nPriority=15) returned 1
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.036] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.036] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.037] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.037] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.037] malloc (_Size=0x1000) returned 0x3274878
	[0082.037] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 191
	[0082.037] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.037] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.037] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e4
	[0082.037] SetThreadPriority (hThread=0x8e4, nPriority=15) returned 1
	[0082.042] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.042] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.042] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.042] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.043] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.043] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.047] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.047] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.047] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.047] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.047] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.047] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.047] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.047] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.047] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.048] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.048] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.048] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.048] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.048] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.048] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.048] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.048] malloc (_Size=0x1000) returned 0x327b8b0
	[0082.048] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 191
	[0082.048] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.048] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.048] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e8
	[0082.048] SetThreadPriority (hThread=0x8e8, nPriority=15) returned 1
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.094] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.094] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.095] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.095] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.095] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.095] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.095] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.095] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.095] malloc (_Size=0x1000) returned 0x32798a0
	[0082.095] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 191
	[0082.095] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.095] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.095] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ec
	[0082.095] SetThreadPriority (hThread=0x8ec, nPriority=15) returned 1
	[0082.100] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.103] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.103] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.103] malloc (_Size=0x1000) returned 0x327a8a8
	[0082.103] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 191
	[0082.103] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.104] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.104] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f0
	[0082.104] SetThreadPriority (hThread=0x8f0, nPriority=15) returned 1
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.111] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.111] malloc (_Size=0x1000) returned 0x3278898
	[0082.111] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 191
	[0082.111] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.111] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.112] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f4
	[0082.112] SetThreadPriority (hThread=0x8f4, nPriority=15) returned 1
	[0082.135] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.135] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.135] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.135] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.136] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.136] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.136] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.136] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.157] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.157] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.173] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.175] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.176] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.176] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.176] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.176] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.176] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.176] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.177] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.177] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.177] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.177] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.177] malloc (_Size=0x1000) returned 0x32798a0
	[0082.177] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 191
	[0082.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f8
	[0082.177] SetThreadPriority (hThread=0x8f8, nPriority=15) returned 1
	[0082.182] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.182] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.182] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.182] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.183] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.183] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.184] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.184] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.185] malloc (_Size=0x1000) returned 0x3278898
	[0082.185] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 191
	[0082.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8fc
	[0082.187] SetThreadPriority (hThread=0x8fc, nPriority=15) returned 1
	[0082.188] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.194] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.194] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.194] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.200] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.200] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.200] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.210] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.210] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.210] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.210] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.210] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.211] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.211] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.211] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.211] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.254] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.254] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.254] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.254] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.254] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.255] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.255] malloc (_Size=0x1000) returned 0x32798a0
	[0082.255] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 191
	[0082.255] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.255] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.255] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x900
	[0082.255] SetThreadPriority (hThread=0x900, nPriority=15) returned 1
	[0082.257] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.257] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.259] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.260] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.260] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.260] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.260] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.260] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.261] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.261] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.261] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.261] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.261] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.261] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.261] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.261] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.261] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.261] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.261] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.261] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.261] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.261] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.261] malloc (_Size=0x1000) returned 0x3277890
	[0082.261] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 191
	[0082.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x904
	[0082.261] SetThreadPriority (hThread=0x904, nPriority=15) returned 1
	[0082.263] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.269] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.269] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.269] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.276] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.276] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.276] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.276] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.277] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.277] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.279] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.279] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.279] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.279] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.279] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.279] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.279] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.279] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.279] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.279] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.279] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.279] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.279] malloc (_Size=0x1000) returned 0x3274878
	[0082.279] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 191
	[0082.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x908
	[0082.280] SetThreadPriority (hThread=0x908, nPriority=15) returned 1
	[0082.282] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.283] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.283] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.288] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.288] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.288] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.288] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.288] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.288] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.288] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.288] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.288] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.288] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.288] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.288] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.288] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.288] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.289] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.289] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.289] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.289] malloc (_Size=0x1000) returned 0x3274878
	[0082.289] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 191
	[0082.289] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.289] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.289] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x90c
	[0082.289] SetThreadPriority (hThread=0x90c, nPriority=15) returned 1
	[0082.291] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.292] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.292] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.293] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.293] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.294] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.296] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.296] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.296] malloc (_Size=0x1000) returned 0x3277890
	[0082.296] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 191
	[0082.296] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.296] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.296] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910
	[0082.296] SetThreadPriority (hThread=0x910, nPriority=15) returned 1
	[0082.298] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.300] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.300] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.301] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.301] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.303] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.303] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.304] malloc (_Size=0x1000) returned 0x3275880
	[0082.304] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 191
	[0082.304] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.304] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.304] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914
	[0082.304] SetThreadPriority (hThread=0x914, nPriority=15) returned 1
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.309] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.309] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.310] malloc (_Size=0x1000) returned 0x327a8a8
	[0082.310] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 191
	[0082.310] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.310] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.310] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x918
	[0082.310] SetThreadPriority (hThread=0x918, nPriority=15) returned 1
	[0082.317] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.317] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.317] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.323] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.323] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.323] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.355] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.355] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.381] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.381] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.477] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.477] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.477] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.477] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.477] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.477] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.477] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.477] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.477] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.477] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.477] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.477] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.477] malloc (_Size=0x1000) returned 0x3276888
	[0082.477] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 191
	[0082.477] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.477] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.477] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x91c
	[0082.478] SetThreadPriority (hThread=0x91c, nPriority=15) returned 1
	[0082.479] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.480] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.481] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.481] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.484] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.484] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.484] malloc (_Size=0x1000) returned 0x3274878
	[0082.484] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 191
	[0082.484] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.484] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.484] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x920
	[0082.485] SetThreadPriority (hThread=0x920, nPriority=15) returned 1
	[0082.488] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.488] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.488] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.488] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.488] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.488] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.489] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.489] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.490] malloc (_Size=0x1000) returned 0x327b8b0
	[0082.490] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 191
	[0082.491] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.491] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.491] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x924
	[0082.540] SetThreadPriority (hThread=0x924, nPriority=15) returned 1
	[0082.541] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.542] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.542] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.543] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.545] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.545] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.546] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.546] malloc (_Size=0x1000) returned 0x3276888
	[0082.546] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 191
	[0082.546] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.546] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.546] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x928
	[0082.546] SetThreadPriority (hThread=0x928, nPriority=15) returned 1
	[0082.548] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.549] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.549] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.550] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.550] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.551] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.552] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.552] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.552] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.552] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.552] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.552] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.552] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.552] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.552] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.552] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.552] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.552] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.553] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.553] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.553] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.553] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.553] malloc (_Size=0x1000) returned 0x3275880
	[0082.553] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 191
	[0082.553] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.553] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.553] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x92c
	[0082.553] SetThreadPriority (hThread=0x92c, nPriority=15) returned 1
	[0082.555] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.559] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.559] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.559] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.559] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.559] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.559] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.559] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.560] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.560] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.560] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.560] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.560] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.560] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.560] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.560] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.560] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.560] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.560] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.560] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.560] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.560] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.560] malloc (_Size=0x1000) returned 0x3278898
	[0082.560] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 191
	[0082.560] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.560] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.560] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x930
	[0082.560] SetThreadPriority (hThread=0x930, nPriority=15) returned 1
	[0082.562] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.563] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.563] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.567] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.567] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.567] malloc (_Size=0x1000) returned 0x3274878
	[0082.567] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 191
	[0082.567] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.567] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.567] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934
	[0082.568] SetThreadPriority (hThread=0x934, nPriority=15) returned 1
	[0082.571] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.571] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.571] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.571] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.571] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.571] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.571] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.571] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.571] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.571] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.571] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.572] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.572] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.573] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.573] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.573] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.573] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.573] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.573] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.575] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.575] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.575] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.575] malloc (_Size=0x1000) returned 0x3276888
	[0082.575] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 191
	[0082.575] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.575] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.575] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938
	[0082.575] SetThreadPriority (hThread=0x938, nPriority=15) returned 1
	[0082.577] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.582] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.582] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.582] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.588] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.598] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.598] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.598] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.598] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.598] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.598] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.598] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.619] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.619] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.619] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.619] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.671] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.671] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.671] malloc (_Size=0x1000) returned 0x32798a0
	[0082.671] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 191
	[0082.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c
	[0082.671] SetThreadPriority (hThread=0x93c, nPriority=15) returned 1
	[0082.673] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.675] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3177704 | out: _String=".xml") returned=".xml"
	[0082.677] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.677] malloc (_Size=0x1000) returned 0x3278898
	[0082.677] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 191
	[0082.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0082.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0082.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x940
	[0082.678] SetThreadPriority (hThread=0x940, nPriority=15) returned 1
	[0082.681] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.682] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.684] _wcslwr (in: _String=0x31776c8 | out: _String=".xml") returned=".xml"
	[0082.684] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.684] malloc (_Size=0x1000) returned 0x3274878
	[0082.684] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 161
	[0082.684] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.684] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="wasse") returned 0x0
	[0082.684] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="passw") returned 0x0
	[0082.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944
	[0082.685] SetThreadPriority (hThread=0x944, nPriority=15) returned 1
	[0082.698] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0082.709] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.709] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0082.709] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.730] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0082.856] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.160] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.160] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.160] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.160] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.160] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.160] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.160] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.160] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.160] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.160] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.160] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.161] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.161] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.161] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.161] _wcslwr (in: _String=0x31776cc | out: _String=".xml") returned=".xml"
	[0083.161] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.161] malloc (_Size=0x1000) returned 0x32798a0
	[0083.161] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 163
	[0083.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0083.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0083.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948
	[0083.161] SetThreadPriority (hThread=0x948, nPriority=15) returned 1
	[0083.163] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.166] _wcslwr (in: _String=0x31776c6 | out: _String=".xml") returned=".xml"
	[0083.166] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.166] malloc (_Size=0x1000) returned 0x3278898
	[0083.167] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 160
	[0083.168] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.168] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0083.168] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0083.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x94c
	[0083.170] SetThreadPriority (hThread=0x94c, nPriority=15) returned 1
	[0083.175] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.175] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.175] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.175] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.175] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.175] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.175] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.175] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.175] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.175] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.175] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.175] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.175] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.175] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.176] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.176] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.177] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.177] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.177] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.177] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.177] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.177] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.177] malloc (_Size=0x1000) returned 0x3274878
	[0083.177] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 220
	[0083.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x950
	[0083.177] SetThreadPriority (hThread=0x950, nPriority=15) returned 1
	[0083.179] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.190] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.190] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.201] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.201] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.251] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.251] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.251] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.251] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.251] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.251] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.251] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.251] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.252] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.252] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.252] malloc (_Size=0x1000) returned 0x32798a0
	[0083.252] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 220
	[0083.252] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.252] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.252] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x954
	[0083.252] SetThreadPriority (hThread=0x954, nPriority=15) returned 1
	[0083.256] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.256] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.256] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.256] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.256] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.256] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.256] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.258] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.258] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.258] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.258] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.258] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.258] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.258] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.258] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.258] malloc (_Size=0x1000) returned 0x3277890
	[0083.258] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 220
	[0083.258] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.258] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.258] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x958
	[0083.259] SetThreadPriority (hThread=0x958, nPriority=15) returned 1
	[0083.272] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.282] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.283] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.283] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.283] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.283] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.412] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.412] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.412] malloc (_Size=0x1000) returned 0x32798a0
	[0083.412] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 220
	[0083.412] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.412] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.412] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x95c
	[0083.413] SetThreadPriority (hThread=0x95c, nPriority=15) returned 1
	[0083.416] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.416] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.417] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.419] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.419] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.419] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.419] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.419] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.419] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.419] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.419] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.419] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.419] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.419] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.419] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.419] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.419] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.420] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.420] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.420] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.420] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.420] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.420] malloc (_Size=0x1000) returned 0x3274878
	[0083.420] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 220
	[0083.420] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.420] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.420] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x960
	[0083.420] SetThreadPriority (hThread=0x960, nPriority=15) returned 1
	[0083.433] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.444] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.444] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.465] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.509] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.511] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.511] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.511] malloc (_Size=0x1000) returned 0x3274878
	[0083.511] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 220
	[0083.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x964
	[0083.512] SetThreadPriority (hThread=0x964, nPriority=15) returned 1
	[0083.515] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.516] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.517] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.517] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.517] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.517] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.517] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.517] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.517] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.517] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.517] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.517] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.518] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.518] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.518] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.518] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.518] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.518] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.518] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.518] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.518] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.518] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.518] malloc (_Size=0x1000) returned 0x327b8b0
	[0083.518] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 220
	[0083.518] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.518] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.518] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x968
	[0083.518] SetThreadPriority (hThread=0x968, nPriority=15) returned 1
	[0083.531] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.531] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.542] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.542] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.542] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.566] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.567] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.567] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.567] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.567] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.567] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.567] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.567] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.567] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.567] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.568] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.568] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.568] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.568] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.568] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.568] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.568] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.568] malloc (_Size=0x1000) returned 0x32798a0
	[0083.568] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 220
	[0083.568] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.568] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.568] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x96c
	[0083.568] SetThreadPriority (hThread=0x96c, nPriority=15) returned 1
	[0083.572] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.574] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.574] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.574] malloc (_Size=0x1000) returned 0x327a8a8
	[0083.574] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 220
	[0083.574] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.574] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.574] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x970
	[0083.575] SetThreadPriority (hThread=0x970, nPriority=15) returned 1
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.816] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.816] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.869] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.869] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.869] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.869] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.869] malloc (_Size=0x1000) returned 0x327b8b0
	[0083.869] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 220
	[0083.869] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.869] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.870] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x974
	[0083.870] SetThreadPriority (hThread=0x974, nPriority=15) returned 1
	[0083.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.877] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0083.879] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.879] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0083.879] malloc (_Size=0x1000) returned 0x32798a0
	[0083.879] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 220
	[0083.879] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.879] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0083.880] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0083.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x978
	[0083.880] SetThreadPriority (hThread=0x978, nPriority=15) returned 1
	[0083.882] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.887] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0083.887] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0083.904] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.100] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.100] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.101] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.101] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.101] malloc (_Size=0x1000) returned 0x3274878
	[0084.101] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 220
	[0084.101] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.101] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.101] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x97c
	[0084.102] SetThreadPriority (hThread=0x97c, nPriority=15) returned 1
	[0084.104] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.105] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.107] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.107] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.107] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.107] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.107] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.107] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.108] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.108] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.108] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.108] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.108] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.108] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.108] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.108] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.108] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.108] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.108] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.108] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.108] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.108] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.108] malloc (_Size=0x1000) returned 0x3278898
	[0084.108] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 220
	[0084.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x980
	[0084.108] SetThreadPriority (hThread=0x980, nPriority=15) returned 1
	[0084.111] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.114] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.114] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.114] malloc (_Size=0x1000) returned 0x327b8b0
	[0084.114] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 220
	[0084.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x984
	[0084.115] SetThreadPriority (hThread=0x984, nPriority=15) returned 1
	[0084.118] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.118] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.118] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.118] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.118] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.118] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.118] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.118] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.118] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.118] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.118] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.118] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.118] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.119] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.120] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.120] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.120] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.122] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.122] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.122] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.122] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.122] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.122] malloc (_Size=0x1000) returned 0x3275880
	[0084.122] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 220
	[0084.122] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.122] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.122] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x988
	[0084.122] SetThreadPriority (hThread=0x988, nPriority=15) returned 1
	[0084.125] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.126] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.128] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.128] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.128] malloc (_Size=0x1000) returned 0x3276888
	[0084.128] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 220
	[0084.128] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.128] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.128] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x98c
	[0084.129] SetThreadPriority (hThread=0x98c, nPriority=15) returned 1
	[0084.294] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.294] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.294] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.294] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.294] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.294] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.294] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.294] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.294] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.294] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.294] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.295] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.295] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.295] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.295] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.295] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.295] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.295] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.295] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.295] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.295] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.295] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.295] malloc (_Size=0x1000) returned 0x3276888
	[0084.295] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 220
	[0084.295] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.295] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.295] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x990
	[0084.295] SetThreadPriority (hThread=0x990, nPriority=15) returned 1
	[0084.299] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.301] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.301] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.302] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.302] malloc (_Size=0x1000) returned 0x327b8b0
	[0084.302] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 220
	[0084.302] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.302] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.302] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x994
	[0084.302] SetThreadPriority (hThread=0x994, nPriority=15) returned 1
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.308] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.308] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.309] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.309] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.309] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.309] malloc (_Size=0x1000) returned 0x327b8b0
	[0084.309] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 220
	[0084.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x998
	[0084.309] SetThreadPriority (hThread=0x998, nPriority=15) returned 1
	[0084.322] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.334] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.334] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.334] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.334] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.334] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.334] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.334] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.334] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.334] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.356] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.356] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.356] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.374] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.374] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.374] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.374] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.374] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.374] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.374] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.374] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.374] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.374] malloc (_Size=0x1000) returned 0x3276888
	[0084.374] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 220
	[0084.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x99c
	[0084.379] SetThreadPriority (hThread=0x99c, nPriority=15) returned 1
	[0084.385] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.386] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.386] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.386] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.387] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.387] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.387] malloc (_Size=0x1000) returned 0x3277890
	[0084.387] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 220
	[0084.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a0
	[0084.387] SetThreadPriority (hThread=0x9a0, nPriority=15) returned 1
	[0084.395] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.400] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.400] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.400] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.400] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.433] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.433] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.452] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.457] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.457] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.457] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.457] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.457] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.457] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.457] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.457] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.457] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.457] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.457] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.457] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.457] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.457] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.457] malloc (_Size=0x1000) returned 0x3275880
	[0084.457] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 220
	[0084.457] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.457] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.457] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a4
	[0084.458] SetThreadPriority (hThread=0x9a4, nPriority=15) returned 1
	[0084.459] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.461] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.466] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.466] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.466] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.466] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.466] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.466] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.466] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.466] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.466] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.466] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.467] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.467] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.467] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.467] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.467] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.467] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.467] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.467] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.467] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.467] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.467] malloc (_Size=0x1000) returned 0x32798a0
	[0084.467] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 220
	[0084.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a8
	[0084.467] SetThreadPriority (hThread=0x9a8, nPriority=15) returned 1
	[0084.469] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.475] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.475] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.475] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.475] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.475] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.475] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.481] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.481] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.481] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.482] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.485] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.485] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.485] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.485] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.485] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.485] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.485] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.485] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.485] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.485] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.485] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.485] malloc (_Size=0x1000) returned 0x3277890
	[0084.485] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 220
	[0084.485] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.485] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.485] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9ac
	[0084.485] SetThreadPriority (hThread=0x9ac, nPriority=15) returned 1
	[0084.487] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.489] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.491] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.491] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.491] malloc (_Size=0x1000) returned 0x3275880
	[0084.491] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 220
	[0084.491] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.491] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.491] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b0
	[0084.492] SetThreadPriority (hThread=0x9b0, nPriority=15) returned 1
	[0084.494] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.495] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.495] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.496] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.496] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.498] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.498] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.498] malloc (_Size=0x1000) returned 0x327a8a8
	[0084.498] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 220
	[0084.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b4
	[0084.499] SetThreadPriority (hThread=0x9b4, nPriority=15) returned 1
	[0084.502] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.503] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.504] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.506] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.506] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.506] malloc (_Size=0x1000) returned 0x3276888
	[0084.506] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 220
	[0084.506] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.506] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.506] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b8
	[0084.507] SetThreadPriority (hThread=0x9b8, nPriority=15) returned 1
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.513] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.513] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.513] malloc (_Size=0x1000) returned 0x3275880
	[0084.513] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 220
	[0084.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9bc
	[0084.514] SetThreadPriority (hThread=0x9bc, nPriority=15) returned 1
	[0084.515] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.515] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.528] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.528] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.528] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.538] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.538] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.538] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.539] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.539] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.539] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.539] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.539] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.539] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.592] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.592] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.592] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.592] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.592] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.592] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.592] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.592] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.592] malloc (_Size=0x1000) returned 0x3277890
	[0084.592] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 220
	[0084.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c0
	[0084.593] SetThreadPriority (hThread=0x9c0, nPriority=15) returned 1
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.681] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.681] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.681] malloc (_Size=0x1000) returned 0x3274878
	[0084.682] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 220
	[0084.682] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.682] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.682] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c4
	[0084.682] SetThreadPriority (hThread=0x9c4, nPriority=15) returned 1
	[0084.684] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.685] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.685] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.685] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.685] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.686] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.688] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.688] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.688] malloc (_Size=0x1000) returned 0x3274878
	[0084.689] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 220
	[0084.689] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.689] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.689] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c8
	[0084.689] SetThreadPriority (hThread=0x9c8, nPriority=15) returned 1
	[0084.692] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.693] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.695] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.695] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.695] malloc (_Size=0x1000) returned 0x3276888
	[0084.695] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 220
	[0084.695] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.695] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.696] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9cc
	[0084.696] SetThreadPriority (hThread=0x9cc, nPriority=15) returned 1
	[0084.699] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.699] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.702] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.702] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.702] malloc (_Size=0x1000) returned 0x3275880
	[0084.702] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 220
	[0084.702] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.702] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.702] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d0
	[0084.703] SetThreadPriority (hThread=0x9d0, nPriority=15) returned 1
	[0084.705] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.706] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.706] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.706] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.706] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.706] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.706] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.706] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.706] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.706] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.707] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.707] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.707] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.707] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.707] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.707] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.707] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.707] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.707] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.707] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.707] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.707] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.707] malloc (_Size=0x1000) returned 0x32798a0
	[0084.707] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 220
	[0084.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d8
	[0084.719] SetThreadPriority (hThread=0x9d8, nPriority=15) returned 1
	[0084.726] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.726] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.726] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.726] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.727] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.727] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.727] malloc (_Size=0x1000) returned 0x32798a0
	[0084.727] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 220
	[0084.727] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.727] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.727] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9dc
	[0084.728] SetThreadPriority (hThread=0x9dc, nPriority=15) returned 1
	[0084.730] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.730] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.733] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.733] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.734] malloc (_Size=0x1000) returned 0x3275880
	[0084.734] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 220
	[0084.734] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.734] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.734] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e0
	[0084.734] SetThreadPriority (hThread=0x9e0, nPriority=15) returned 1
	[0084.758] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.779] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.877] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.877] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.877] malloc (_Size=0x1000) returned 0x3274878
	[0084.878] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 220
	[0084.878] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.878] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.878] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d4
	[0084.878] SetThreadPriority (hThread=0x9d4, nPriority=15) returned 1
	[0084.881] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0084.884] _wcslwr (in: _String=0x317773e | out: _String=".xml") returned=".xml"
	[0084.884] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0084.884] malloc (_Size=0x1000) returned 0x3277890
	[0084.884] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 220
	[0084.884] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.885] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0084.885] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0084.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e4
	[0084.885] SetThreadPriority (hThread=0x9e4, nPriority=15) returned 1
	[0084.888] _wcslwr (in: _String=0x3177702 | out: _String=".xml") returned=".xml"
	[0084.888] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0084.888] _wcslwr (in: _String=0x3177702 | out: _String=".xml") returned=".xml"
	[0084.888] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0084.888] _wcslwr (in: _String=0x3177702 | out: _String=".xml") returned=".xml"
	[0084.888] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0084.888] _wcslwr (in: _String=0x3177702 | out: _String=".xml") returned=".xml"
	[0084.888] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0084.888] _wcslwr (in: _String=0x3177702 | out: _String=".xml") returned=".xml"
	[0084.888] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0084.888] _wcslwr (in: _String=0x3177702 | out: _String=".xml") returned=".xml"
	[0084.888] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0084.888] _wcslwr (in: _String=0x3177702 | out: _String=".xml") returned=".xml"
	[0084.888] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0084.888] malloc (_Size=0x1000) returned 0x327a8a8
	[0084.888] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 190
	[0084.888] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.888] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="wasse") returned 0x0
	[0084.888] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="passw") returned 0x0
	[0084.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e8
	[0084.893] SetThreadPriority (hThread=0x9e8, nPriority=15) returned 1
	[0084.900] malloc (_Size=0x1000) returned 0x327b8b0
	[0084.905] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 192
	[0084.905] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.590] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0085.590] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0085.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9ec
	[0085.591] SetThreadPriority (hThread=0x9ec, nPriority=15) returned 1
	[0085.598] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0085.599] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0085.599] malloc (_Size=0x1000) returned 0x3276888
	[0085.599] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 189
	[0085.599] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.599] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0085.599] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0085.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f0
	[0085.599] SetThreadPriority (hThread=0x9f0, nPriority=15) returned 1
	[0085.605] malloc (_Size=0x1000) returned 0x3278898
	[0085.605] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 249
	[0085.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0085.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0085.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f4
	[0085.605] SetThreadPriority (hThread=0x9f4, nPriority=15) returned 1
	[0085.607] malloc (_Size=0x1000) returned 0x32798a0
	[0085.607] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 249
	[0085.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0085.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0085.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f8
	[0085.678] SetThreadPriority (hThread=0x9f8, nPriority=15) returned 1
	[0085.683] malloc (_Size=0x1000) returned 0x327a8a8
	[0085.683] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 249
	[0085.687] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.688] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0085.689] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0085.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9fc
	[0085.690] SetThreadPriority (hThread=0x9fc, nPriority=15) returned 1
	[0085.700] malloc (_Size=0x1000) returned 0x32798a0
	[0085.705] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 249
	[0085.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.778] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0085.828] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0085.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa00
	[0085.831] SetThreadPriority (hThread=0xa00, nPriority=15) returned 1
	[0085.837] malloc (_Size=0x1000) returned 0x3276888
	[0085.837] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 249
	[0085.837] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.837] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0085.837] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0085.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa04
	[0085.837] SetThreadPriority (hThread=0xa04, nPriority=15) returned 1
	[0085.839] malloc (_Size=0x1000) returned 0x3278898
	[0086.118] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 249
	[0086.118] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.118] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.118] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa08
	[0086.118] SetThreadPriority (hThread=0xa08, nPriority=15) returned 1
	[0086.122] malloc (_Size=0x1000) returned 0x3274878
	[0086.122] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 249
	[0086.123] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.124] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.124] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa0c
	[0086.125] SetThreadPriority (hThread=0xa0c, nPriority=15) returned 1
	[0086.176] malloc (_Size=0x1000) returned 0x3277890
	[0086.176] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 249
	[0086.176] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.176] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.176] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa10
	[0086.176] SetThreadPriority (hThread=0xa10, nPriority=15) returned 1
	[0086.180] malloc (_Size=0x1000) returned 0x3275880
	[0086.181] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 249
	[0086.181] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.181] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.181] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa14
	[0086.182] SetThreadPriority (hThread=0xa14, nPriority=15) returned 1
	[0086.183] malloc (_Size=0x1000) returned 0x3278898
	[0086.189] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 249
	[0086.195] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.195] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.206] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa18
	[0086.385] SetThreadPriority (hThread=0xa18, nPriority=15) returned 1
	[0086.392] malloc (_Size=0x1000) returned 0x3275880
	[0086.394] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 249
	[0086.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa1c
	[0086.394] SetThreadPriority (hThread=0xa1c, nPriority=15) returned 1
	[0086.401] malloc (_Size=0x1000) returned 0x3274878
	[0086.407] _swprintf (in: param_1=0x3274878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 249
	[0086.407] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.407] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.701] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3274878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa20
	[0086.702] SetThreadPriority (hThread=0xa20, nPriority=15) returned 1
	[0086.704] malloc (_Size=0x1000) returned 0x327c8b8
	[0086.704] _swprintf (in: param_1=0x327c8b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 249
	[0086.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327c8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa28
	[0086.704] SetThreadPriority (hThread=0xa28, nPriority=15) returned 1
	[0086.705] malloc (_Size=0x1000) returned 0x327b8b0
	[0086.705] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 249
	[0086.705] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.705] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.705] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa30
	[0086.706] SetThreadPriority (hThread=0xa30, nPriority=15) returned 1
	[0086.707] malloc (_Size=0x1000) returned 0x3275880
	[0086.707] _swprintf (in: param_1=0x3275880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 249
	[0086.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3275880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa38
	[0086.707] SetThreadPriority (hThread=0xa38, nPriority=15) returned 1
	[0086.709] malloc (_Size=0x1000) returned 0x3278898
	[0086.709] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 249
	[0086.709] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.709] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.709] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa40
	[0086.709] SetThreadPriority (hThread=0xa40, nPriority=15) returned 1
	[0086.711] malloc (_Size=0x1000) returned 0x32798a0
	[0086.711] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 249
	[0086.711] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.711] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.711] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa48
	[0086.711] SetThreadPriority (hThread=0xa48, nPriority=15) returned 1
	[0086.712] malloc (_Size=0x1000) returned 0x327a8a8
	[0086.712] _swprintf (in: param_1=0x327a8a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 249
	[0086.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa50
	[0086.713] SetThreadPriority (hThread=0xa50, nPriority=15) returned 1
	[0086.714] malloc (_Size=0x1000) returned 0x327d8c0
	[0086.714] _swprintf (in: param_1=0x327d8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 249
	[0086.714] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.714] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.714] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327d8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa58
	[0086.714] SetThreadPriority (hThread=0xa58, nPriority=15) returned 1
	[0086.715] malloc (_Size=0x1000) returned 0x3276888
	[0086.715] _swprintf (in: param_1=0x3276888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 249
	[0086.716] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.716] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.716] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3276888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa60
	[0086.716] SetThreadPriority (hThread=0xa60, nPriority=15) returned 1
	[0086.717] malloc (_Size=0x1000) returned 0x327e8c8
	[0086.717] _swprintf (in: param_1=0x327e8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 249
	[0086.717] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.717] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.717] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327e8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa68
	[0086.718] SetThreadPriority (hThread=0xa68, nPriority=15) returned 1
	[0086.719] malloc (_Size=0x1000) returned 0x3277890
	[0086.719] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 249
	[0086.719] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.719] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.719] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa70
	[0086.720] SetThreadPriority (hThread=0xa70, nPriority=15) returned 1
	[0086.721] malloc (_Size=0x1000) returned 0x327f8d0
	[0086.721] _swprintf (in: param_1=0x327f8d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 249
	[0086.721] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.721] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.721] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327f8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa78
	[0086.721] SetThreadPriority (hThread=0xa78, nPriority=15) returned 1
	[0086.722] malloc (_Size=0x1000) returned 0x32808d8
	[0086.722] _swprintf (in: param_1=0x32808d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 249
	[0086.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32808d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa80
	[0086.723] SetThreadPriority (hThread=0xa80, nPriority=15) returned 1
	[0086.724] malloc (_Size=0x1000) returned 0x32818e0
	[0086.724] _swprintf (in: param_1=0x32818e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 249
	[0086.724] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.724] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.724] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32818e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa88
	[0086.725] SetThreadPriority (hThread=0xa88, nPriority=15) returned 1
	[0086.726] malloc (_Size=0x1000) returned 0x32828e8
	[0086.726] _swprintf (in: param_1=0x32828e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 249
	[0086.726] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.726] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.726] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32828e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa90
	[0086.726] SetThreadPriority (hThread=0xa90, nPriority=15) returned 1
	[0086.727] malloc (_Size=0x1000) returned 0x328b8b8
	[0086.729] _swprintf (in: param_1=0x328b8b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 249
	[0086.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.730] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328b8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa98
	[0086.730] SetThreadPriority (hThread=0xa98, nPriority=15) returned 1
	[0086.731] malloc (_Size=0x1000) returned 0x32888a0
	[0086.731] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 249
	[0086.731] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.731] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.731] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa0
	[0086.731] SetThreadPriority (hThread=0xaa0, nPriority=15) returned 1
	[0086.732] malloc (_Size=0x1000) returned 0x3284880
	[0086.732] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 249
	[0086.733] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.733] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.733] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa8
	[0086.733] SetThreadPriority (hThread=0xaa8, nPriority=15) returned 1
	[0086.734] malloc (_Size=0x1000) returned 0x32898a8
	[0086.734] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 249
	[0086.734] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.734] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.734] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab0
	[0086.735] SetThreadPriority (hThread=0xab0, nPriority=15) returned 1
	[0086.736] malloc (_Size=0x1000) returned 0x328a8b0
	[0086.736] _swprintf (in: param_1=0x328a8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 249
	[0086.736] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.736] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.736] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328a8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8
	[0086.736] SetThreadPriority (hThread=0xab8, nPriority=15) returned 1
	[0086.737] malloc (_Size=0x1000) returned 0x3285888
	[0086.737] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 249
	[0086.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0
	[0086.738] SetThreadPriority (hThread=0xac0, nPriority=15) returned 1
	[0086.739] malloc (_Size=0x1000) returned 0x328c8c0
	[0086.739] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 249
	[0086.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8
	[0086.739] SetThreadPriority (hThread=0xac8, nPriority=15) returned 1
	[0086.741] malloc (_Size=0x1000) returned 0x328d8c8
	[0086.741] _swprintf (in: param_1=0x328d8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 249
	[0086.741] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.741] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.741] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0
	[0086.741] SetThreadPriority (hThread=0xad0, nPriority=15) returned 1
	[0086.744] malloc (_Size=0x1000) returned 0x3287898
	[0086.744] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 249
	[0086.744] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.744] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.744] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8
	[0086.744] SetThreadPriority (hThread=0xad8, nPriority=15) returned 1
	[0086.745] malloc (_Size=0x1000) returned 0x3286890
	[0086.745] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 249
	[0086.745] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.745] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.745] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0
	[0086.746] SetThreadPriority (hThread=0xae0, nPriority=15) returned 1
	[0086.747] malloc (_Size=0x1000) returned 0x32918e8
	[0086.747] _swprintf (in: param_1=0x32918e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 249
	[0086.747] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.747] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.747] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32918e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8
	[0086.747] SetThreadPriority (hThread=0xae8, nPriority=15) returned 1
	[0086.748] malloc (_Size=0x1000) returned 0x32908e0
	[0086.748] _swprintf (in: param_1=0x32908e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 249
	[0086.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32908e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0
	[0086.749] SetThreadPriority (hThread=0xaf0, nPriority=15) returned 1
	[0086.750] malloc (_Size=0x1000) returned 0x32928f0
	[0086.750] _swprintf (in: param_1=0x32928f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 219
	[0086.750] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.750] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="wasse") returned 0x0
	[0086.750] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", _SubStr="passw") returned 0x0
	[0086.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32928f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8
	[0086.750] SetThreadPriority (hThread=0xaf8, nPriority=15) returned 1
	[0086.752] malloc (_Size=0x1000) returned 0x3294900
	[0086.752] _swprintf (in: param_1=0x3294900, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 221
	[0086.752] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.752] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0086.752] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0086.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3294900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00
	[0086.752] SetThreadPriority (hThread=0xb00, nPriority=15) returned 1
	[0086.753] malloc (_Size=0x1000) returned 0x328f8d8
	[0086.753] _swprintf (in: param_1=0x328f8d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 218
	[0086.753] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.753] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0086.753] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0086.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328f8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08
	[0086.754] SetThreadPriority (hThread=0xb08, nPriority=15) returned 1
	[0086.755] malloc (_Size=0x1000) returned 0x3295908
	[0086.755] _swprintf (in: param_1=0x3295908, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\CoronaVirus.txt") returned 66
	[0086.755] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0086.755] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0087.846] _alloca_probe () returned 0x4036d0
	[0087.846] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\client\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0087.849] _alloca_probe () returned 0x4036d0
	[0087.852] malloc (_Size=0x1000) returned 0x328b8b8
	[0087.852] _swprintf (in: param_1=0x328b8b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\client\\CoronaVirus.txt") returned 61
	[0087.852] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\client\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0087.852] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0087.856] _alloca_probe () returned 0x4036d0
	[0087.856] malloc (_Size=0x1000) returned 0x328a8b0
	[0087.856] _swprintf (in: param_1=0x328a8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\CoronaVirus.txt") returned 62
	[0087.856] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0087.856] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0087.862] _alloca_probe () returned 0x4036d0
	[0087.864] malloc (_Size=0x1000) returned 0x3284880
	[0087.864] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif") returned 68
	[0087.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", _SubStr="wasse") returned 0x0
	[0087.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", _SubStr="passw") returned 0x0
	[0087.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa34
	[0087.864] SetThreadPriority (hThread=0xa34, nPriority=15) returned 1
	[0087.866] malloc (_Size=0x1000) returned 0x32888a0
	[0087.867] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif") returned 68
	[0087.867] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.867] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", _SubStr="wasse") returned 0x0
	[0087.867] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", _SubStr="passw") returned 0x0
	[0087.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa24
	[0087.873] SetThreadPriority (hThread=0xa24, nPriority=15) returned 1
	[0087.879] malloc (_Size=0x1000) returned 0x3284880
	[0087.879] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif") returned 68
	[0087.879] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.879] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", _SubStr="wasse") returned 0x0
	[0087.879] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", _SubStr="passw") returned 0x0
	[0087.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa4c
	[0087.882] SetThreadPriority (hThread=0xa4c, nPriority=15) returned 1
	[0087.884] malloc (_Size=0x1000) returned 0x32898a8
	[0087.884] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif") returned 68
	[0087.884] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.884] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", _SubStr="wasse") returned 0x0
	[0087.884] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", _SubStr="passw") returned 0x0
	[0087.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa2c
	[0087.888] SetThreadPriority (hThread=0xa2c, nPriority=15) returned 1
	[0087.894] malloc (_Size=0x1000) returned 0x3284880
	[0087.894] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif") returned 68
	[0087.894] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.894] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", _SubStr="wasse") returned 0x0
	[0087.894] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", _SubStr="passw") returned 0x0
	[0087.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa54
	[0087.897] SetThreadPriority (hThread=0xa54, nPriority=15) returned 1
	[0087.899] malloc (_Size=0x1000) returned 0x3286890
	[0087.899] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif") returned 68
	[0087.899] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.899] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", _SubStr="wasse") returned 0x0
	[0087.899] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", _SubStr="passw") returned 0x0
	[0087.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa94
	[0087.904] SetThreadPriority (hThread=0xa94, nPriority=15) returned 1
	[0087.909] malloc (_Size=0x1000) returned 0x32898a8
	[0087.909] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif") returned 68
	[0087.909] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.909] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", _SubStr="wasse") returned 0x0
	[0087.909] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", _SubStr="passw") returned 0x0
	[0087.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa4
	[0087.912] SetThreadPriority (hThread=0xaa4, nPriority=15) returned 1
	[0087.914] malloc (_Size=0x1000) returned 0x3284880
	[0087.914] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif") returned 68
	[0087.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", _SubStr="wasse") returned 0x0
	[0087.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", _SubStr="passw") returned 0x0
	[0087.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa5c
	[0087.919] SetThreadPriority (hThread=0xa5c, nPriority=15) returned 1
	[0087.926] malloc (_Size=0x1000) returned 0x328c8c0
	[0087.926] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif") returned 68
	[0087.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0087.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", _SubStr="wasse") returned 0x0
	[0087.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", _SubStr="passw") returned 0x0
	[0087.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa64
	[0088.080] SetThreadPriority (hThread=0xa64, nPriority=15) returned 1
	[0088.086] malloc (_Size=0x1000) returned 0x3287898
	[0088.086] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif") returned 68
	[0088.086] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.086] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", _SubStr="wasse") returned 0x0
	[0088.086] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", _SubStr="passw") returned 0x0
	[0088.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa74
	[0088.087] SetThreadPriority (hThread=0xa74, nPriority=15) returned 1
	[0088.092] malloc (_Size=0x1000) returned 0x3284880
	[0088.094] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif") returned 68
	[0088.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", _SubStr="wasse") returned 0x0
	[0088.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", _SubStr="passw") returned 0x0
	[0088.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa6c
	[0088.094] SetThreadPriority (hThread=0xa6c, nPriority=15) returned 1
	[0088.096] malloc (_Size=0x1000) returned 0x328c8c0
	[0088.096] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif") returned 68
	[0088.096] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.096] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", _SubStr="wasse") returned 0x0
	[0088.096] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", _SubStr="passw") returned 0x0
	[0088.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa8c
	[0088.184] SetThreadPriority (hThread=0xa8c, nPriority=15) returned 1
	[0088.192] malloc (_Size=0x1000) returned 0x3284880
	[0088.192] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif") returned 68
	[0088.192] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.192] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", _SubStr="wasse") returned 0x0
	[0088.192] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", _SubStr="passw") returned 0x0
	[0088.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa7c
	[0088.247] SetThreadPriority (hThread=0xa7c, nPriority=15) returned 1
	[0088.249] malloc (_Size=0x1000) returned 0x328c8c0
	[0088.249] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif") returned 68
	[0088.249] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.249] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", _SubStr="wasse") returned 0x0
	[0088.249] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", _SubStr="passw") returned 0x0
	[0088.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc
	[0088.251] SetThreadPriority (hThread=0xabc, nPriority=15) returned 1
	[0088.261] malloc (_Size=0x1000) returned 0x3286890
	[0088.261] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif") returned 68
	[0088.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", _SubStr="wasse") returned 0x0
	[0088.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", _SubStr="passw") returned 0x0
	[0088.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4
	[0088.264] SetThreadPriority (hThread=0xad4, nPriority=15) returned 1
	[0088.267] malloc (_Size=0x1000) returned 0x32888a0
	[0088.267] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif") returned 68
	[0088.267] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", _SubStr="wasse") returned 0x0
	[0088.270] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", _SubStr="passw") returned 0x0
	[0088.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa84
	[0088.318] SetThreadPriority (hThread=0xa84, nPriority=15) returned 1
	[0088.320] malloc (_Size=0x1000) returned 0x3284880
	[0088.320] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif") returned 68
	[0088.320] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.320] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", _SubStr="wasse") returned 0x0
	[0088.322] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", _SubStr="passw") returned 0x0
	[0088.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc
	[0088.323] SetThreadPriority (hThread=0xadc, nPriority=15) returned 1
	[0088.329] malloc (_Size=0x1000) returned 0x328c8c0
	[0088.329] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif") returned 68
	[0088.329] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.329] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", _SubStr="wasse") returned 0x0
	[0088.329] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", _SubStr="passw") returned 0x0
	[0088.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa9c
	[0088.332] SetThreadPriority (hThread=0xa9c, nPriority=15) returned 1
	[0088.334] malloc (_Size=0x1000) returned 0x3287898
	[0088.334] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif") returned 68
	[0088.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", _SubStr="wasse") returned 0x0
	[0088.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", _SubStr="passw") returned 0x0
	[0088.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab4
	[0088.381] SetThreadPriority (hThread=0xab4, nPriority=15) returned 1
	[0088.383] malloc (_Size=0x1000) returned 0x32888a0
	[0088.384] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif") returned 68
	[0088.384] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.384] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", _SubStr="wasse") returned 0x0
	[0088.384] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", _SubStr="passw") returned 0x0
	[0088.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaac
	[0088.434] SetThreadPriority (hThread=0xaac, nPriority=15) returned 1
	[0088.435] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1
	[0088.436] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.436] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.436] malloc (_Size=0x1000) returned 0x32898a8
	[0088.436] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif") returned 68
	[0088.436] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.436] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", _SubStr="wasse") returned 0x0
	[0088.438] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", _SubStr="passw") returned 0x0
	[0088.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec
	[0088.439] SetThreadPriority (hThread=0xaec, nPriority=15) returned 1
	[0088.445] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1
	[0088.445] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.445] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.445] malloc (_Size=0x1000) returned 0x3284880
	[0088.445] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif") returned 68
	[0088.445] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.445] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", _SubStr="wasse") returned 0x0
	[0088.445] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", _SubStr="passw") returned 0x0
	[0088.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4
	[0088.448] SetThreadPriority (hThread=0xac4, nPriority=15) returned 1
	[0088.450] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1
	[0088.450] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.450] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.450] malloc (_Size=0x1000) returned 0x3286890
	[0088.450] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif") returned 68
	[0088.450] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.451] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", _SubStr="wasse") returned 0x0
	[0088.451] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", _SubStr="passw") returned 0x0
	[0088.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10
	[0088.454] SetThreadPriority (hThread=0xb10, nPriority=15) returned 1
	[0088.455] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1
	[0088.455] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.456] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.456] malloc (_Size=0x1000) returned 0x3287898
	[0088.456] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif") returned 68
	[0088.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", _SubStr="wasse") returned 0x0
	[0088.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", _SubStr="passw") returned 0x0
	[0088.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4
	[0088.460] SetThreadPriority (hThread=0xae4, nPriority=15) returned 1
	[0088.468] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1
	[0088.468] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.468] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.468] malloc (_Size=0x1000) returned 0x3284880
	[0088.468] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif") returned 68
	[0088.468] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.468] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", _SubStr="wasse") returned 0x0
	[0088.468] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", _SubStr="passw") returned 0x0
	[0088.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04
	[0088.469] SetThreadPriority (hThread=0xb04, nPriority=15) returned 1
	[0088.470] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1
	[0088.470] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.470] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.471] malloc (_Size=0x1000) returned 0x3285888
	[0088.471] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif") returned 68
	[0088.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", _SubStr="wasse") returned 0x0
	[0088.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", _SubStr="passw") returned 0x0
	[0088.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc
	[0088.471] SetThreadPriority (hThread=0xafc, nPriority=15) returned 1
	[0088.473] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1
	[0088.473] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.473] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.473] malloc (_Size=0x1000) returned 0x328c8c0
	[0088.473] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif") returned 68
	[0088.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", _SubStr="wasse") returned 0x0
	[0088.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", _SubStr="passw") returned 0x0
	[0088.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c
	[0088.474] SetThreadPriority (hThread=0xb1c, nPriority=15) returned 1
	[0088.475] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1
	[0088.475] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.475] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.475] malloc (_Size=0x1000) returned 0x328d8c8
	[0088.475] _swprintf (in: param_1=0x328d8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif") returned 68
	[0088.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", _SubStr="wasse") returned 0x0
	[0088.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", _SubStr="passw") returned 0x0
	[0088.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24
	[0088.476] SetThreadPriority (hThread=0xb24, nPriority=15) returned 1
	[0088.478] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1
	[0088.478] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.478] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.478] malloc (_Size=0x1000) returned 0x3286890
	[0088.478] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif") returned 68
	[0088.478] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.478] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", _SubStr="wasse") returned 0x0
	[0088.478] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", _SubStr="passw") returned 0x0
	[0088.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30
	[0088.479] SetThreadPriority (hThread=0xb30, nPriority=15) returned 1
	[0088.517] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1
	[0088.517] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.517] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.517] malloc (_Size=0x1000) returned 0x32898a8
	[0088.517] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif") returned 68
	[0088.517] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.517] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", _SubStr="wasse") returned 0x0
	[0088.517] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", _SubStr="passw") returned 0x0
	[0088.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc
	[0088.517] SetThreadPriority (hThread=0xacc, nPriority=15) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1
	[0088.519] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.519] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.519] malloc (_Size=0x1000) returned 0x3284880
	[0088.519] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif") returned 68
	[0088.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", _SubStr="wasse") returned 0x0
	[0088.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", _SubStr="passw") returned 0x0
	[0088.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34
	[0088.525] SetThreadPriority (hThread=0xb34, nPriority=15) returned 1
	[0088.526] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1
	[0088.526] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.526] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.526] malloc (_Size=0x1000) returned 0x32888a0
	[0088.526] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif") returned 68
	[0088.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", _SubStr="wasse") returned 0x0
	[0088.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", _SubStr="passw") returned 0x0
	[0088.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c
	[0088.529] SetThreadPriority (hThread=0xb0c, nPriority=15) returned 1
	[0088.535] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1
	[0088.535] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.535] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.535] malloc (_Size=0x1000) returned 0x32898a8
	[0088.535] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif") returned 68
	[0088.535] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.535] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", _SubStr="wasse") returned 0x0
	[0088.535] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", _SubStr="passw") returned 0x0
	[0088.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28
	[0088.585] SetThreadPriority (hThread=0xb28, nPriority=15) returned 1
	[0088.586] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1
	[0088.590] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.590] wcsncmp (_String1="AG", _String2="..", _MaxCount=0x2) returned 19
	[0088.591] malloc (_Size=0x1000) returned 0x3284880
	[0088.591] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif") returned 68
	[0088.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", _SubStr="wasse") returned 0x0
	[0088.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", _SubStr="passw") returned 0x0
	[0088.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38
	[0088.592] SetThreadPriority (hThread=0xb38, nPriority=15) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1
	[0088.594] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.594] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.594] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1
	[0088.594] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.594] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.595] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1
	[0088.596] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.596] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.596] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1
	[0088.596] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.596] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.596] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1
	[0088.596] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.596] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.596] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1
	[0088.596] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.596] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.596] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1
	[0088.596] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.596] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.596] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1
	[0088.597] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.597] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.597] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1
	[0088.597] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.599] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.599] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1
	[0088.599] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1
	[0088.600] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.600] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.600] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1
	[0088.601] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.601] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.601] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1
	[0088.601] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.601] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.601] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1
	[0088.601] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.601] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.601] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1
	[0088.601] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.601] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.601] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1
	[0088.602] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0088.602] wcsncmp (_String1="AN", _String2="..", _MaxCount=0x2) returned 19
	[0088.602] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BA", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1
	[0088.603] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.603] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.603] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1
	[0088.604] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.604] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.604] malloc (_Size=0x1000) returned 0x32888a0
	[0088.604] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif") returned 68
	[0088.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", _SubStr="wasse") returned 0x0
	[0088.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", _SubStr="passw") returned 0x0
	[0088.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14
	[0088.605] SetThreadPriority (hThread=0xb14, nPriority=15) returned 1
	[0088.606] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1
	[0088.606] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.607] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.607] malloc (_Size=0x1000) returned 0x3286890
	[0088.607] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif") returned 68
	[0088.607] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.607] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", _SubStr="wasse") returned 0x0
	[0088.607] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", _SubStr="passw") returned 0x0
	[0088.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4
	[0088.651] SetThreadPriority (hThread=0xaf4, nPriority=15) returned 1
	[0088.652] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1
	[0088.653] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.653] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.653] malloc (_Size=0x1000) returned 0x3284880
	[0088.653] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif") returned 68
	[0088.653] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.653] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", _SubStr="wasse") returned 0x0
	[0088.653] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", _SubStr="passw") returned 0x0
	[0088.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa3c
	[0088.746] SetThreadPriority (hThread=0xa3c, nPriority=15) returned 1
	[0088.747] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1
	[0088.748] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.748] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.748] malloc (_Size=0x1000) returned 0x3286890
	[0088.748] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif") returned 68
	[0088.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", _SubStr="wasse") returned 0x0
	[0088.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", _SubStr="passw") returned 0x0
	[0088.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20
	[0088.809] SetThreadPriority (hThread=0xb20, nPriority=15) returned 1
	[0088.811] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1
	[0088.811] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.811] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.811] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1
	[0088.815] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.815] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.815] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1
	[0088.815] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.815] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.815] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1
	[0088.815] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.815] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.815] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1
	[0088.815] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.815] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.815] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1
	[0088.815] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.816] wcsncmp (_String1="BD", _String2="..", _MaxCount=0x2) returned 20
	[0088.816] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.818] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.818] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.818] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.818] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.818] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.818] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.818] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1
	[0088.818] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.819] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1
	[0088.819] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.819] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1
	[0088.820] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.820] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.820] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1
	[0088.821] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.821] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.821] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0088.821] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.821] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.821] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0088.821] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.821] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.821] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BL", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0088.822] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.822] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.822] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.823] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.823] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1
	[0088.823] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.824] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1
	[0088.824] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.824] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.825] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0088.825] wcsncmp (_String1="BS", _String2="..", _MaxCount=0x2) returned 20
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0088.825] wcsncmp (_String1="CA", _String2="..", _MaxCount=0x2) returned 21
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0088.825] wcsncmp (_String1="CG", _String2="..", _MaxCount=0x2) returned 21
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0088.825] wcsncmp (_String1="CL", _String2="..", _MaxCount=0x2) returned 21
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0088.825] wcsncmp (_String1="CL", _String2="..", _MaxCount=0x2) returned 21
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0088.825] wcsncmp (_String1="CL", _String2="..", _MaxCount=0x2) returned 21
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1
	[0088.825] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0088.825] wcsncmp (_String1="CM", _String2="..", _MaxCount=0x2) returned 21
	[0088.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00004_.gif", cAlternateFileName="CORONA~1.GIF")) returned 1
	[0088.825] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.825] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.825] malloc (_Size=0x1000) returned 0x3284880
	[0088.825] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif") returned 97
	[0088.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0088.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0088.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c
	[0088.826] SetThreadPriority (hThread=0xb2c, nPriority=15) returned 1
	[0088.866] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00011_.gif", cAlternateFileName="CORONA~2.GIF")) returned 1
	[0088.866] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.866] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.866] malloc (_Size=0x1000) returned 0x3284880
	[0088.866] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif") returned 97
	[0088.866] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.866] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0088.866] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0088.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c
	[0088.867] SetThreadPriority (hThread=0xb3c, nPriority=15) returned 1
	[0088.868] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00021_.gif", cAlternateFileName="CORONA~3.GIF")) returned 1
	[0088.870] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.871] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.873] malloc (_Size=0x1000) returned 0x32888a0
	[0088.873] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif") returned 97
	[0088.873] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.873] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0088.873] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0088.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40
	[0088.873] SetThreadPriority (hThread=0xb40, nPriority=15) returned 1
	[0088.875] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1a27, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00037_.gif", cAlternateFileName="CORONA~4.GIF")) returned 1
	[0088.875] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.878] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.878] malloc (_Size=0x1000) returned 0x3287898
	[0088.881] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif") returned 97
	[0088.881] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.881] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0088.881] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0088.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44
	[0088.881] SetThreadPriority (hThread=0xb44, nPriority=15) returned 1
	[0088.885] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xcb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00038_.gif", cAlternateFileName="COCFD5~1.GIF")) returned 1
	[0088.885] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.885] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.887] malloc (_Size=0x1000) returned 0x3284880
	[0088.887] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif") returned 97
	[0088.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0088.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0088.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48
	[0088.888] SetThreadPriority (hThread=0xb48, nPriority=15) returned 1
	[0088.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00040_.gif", cAlternateFileName="COFBA6~1.GIF")) returned 1
	[0088.891] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.891] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.894] malloc (_Size=0x1000) returned 0x3287898
	[0088.894] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif") returned 97
	[0088.894] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.894] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0088.894] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0088.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c
	[0088.894] SetThreadPriority (hThread=0xb4c, nPriority=15) returned 1
	[0088.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca9401b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1e0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00052_.gif", cAlternateFileName="CO06D1~1.GIF")) returned 1
	[0088.899] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.899] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.899] malloc (_Size=0x1000) returned 0x32888a0
	[0088.899] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif") returned 97
	[0088.899] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.899] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0088.899] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0088.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb54
	[0088.902] SetThreadPriority (hThread=0xb54, nPriority=15) returned 1
	[0088.910] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3caba2a1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2e75, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00057_.gif", cAlternateFileName="COC207~1.GIF")) returned 1
	[0088.910] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.910] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.910] malloc (_Size=0x1000) returned 0x3287898
	[0088.911] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif") returned 97
	[0088.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0088.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0088.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58
	[0088.911] SetThreadPriority (hThread=0xb58, nPriority=15) returned 1
	[0088.913] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc37c80, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00090_.gif", cAlternateFileName="COBF22~1.GIF")) returned 1
	[0088.916] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.918] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.918] malloc (_Size=0x1000) returned 0x3287898
	[0088.918] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif") returned 97
	[0088.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0088.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0088.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c
	[0088.919] SetThreadPriority (hThread=0xb5c, nPriority=15) returned 1
	[0088.925] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00092_.gif", cAlternateFileName="CO4936~1.GIF")) returned 1
	[0088.925] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0088.925] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0088.925] malloc (_Size=0x1000) returned 0x3287898
	[0088.925] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif") returned 97
	[0088.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0088.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0088.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0088.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50
	[0088.926] SetThreadPriority (hThread=0xb50, nPriority=15) returned 1
	[0089.149] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x31ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00103_.gif", cAlternateFileName="CO94A0~1.GIF")) returned 1
	[0089.149] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.149] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.149] malloc (_Size=0x1000) returned 0x3287898
	[0089.149] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif") returned 97
	[0089.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0089.150] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0089.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60
	[0089.150] SetThreadPriority (hThread=0xb60, nPriority=15) returned 1
	[0089.154] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cd42d18, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00120_.gif", cAlternateFileName="CO17A3~1.GIF")) returned 1
	[0089.154] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.157] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.157] malloc (_Size=0x1000) returned 0x3285888
	[0089.157] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif") returned 97
	[0089.157] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.157] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0089.157] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0089.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64
	[0089.158] SetThreadPriority (hThread=0xb64, nPriority=15) returned 1
	[0089.159] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdea27d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00126_.gif", cAlternateFileName="COBB6D~1.GIF")) returned 1
	[0089.159] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.161] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.161] malloc (_Size=0x1000) returned 0x3286890
	[0089.161] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif") returned 97
	[0089.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0089.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0089.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68
	[0089.167] SetThreadPriority (hThread=0xb68, nPriority=15) returned 1
	[0089.169] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdf8d27, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x30c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00129_.gif", cAlternateFileName="CO9119~1.GIF")) returned 1
	[0089.169] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.172] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.172] malloc (_Size=0x1000) returned 0x32898a8
	[0089.172] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif") returned 97
	[0089.172] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.172] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0089.172] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0089.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c
	[0089.173] SetThreadPriority (hThread=0xb6c, nPriority=15) returned 1
	[0089.174] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce1617d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1489, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00130_.gif", cAlternateFileName="COE034~1.GIF")) returned 1
	[0089.174] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.180] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.180] malloc (_Size=0x1000) returned 0x32888a0
	[0089.180] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif") returned 97
	[0089.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0089.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0089.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70
	[0089.181] SetThreadPriority (hThread=0xb70, nPriority=15) returned 1
	[0089.182] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xa27, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00135_.gif", cAlternateFileName="COB7BE~1.GIF")) returned 1
	[0089.184] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.184] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.185] malloc (_Size=0x1000) returned 0x3285888
	[0089.185] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif") returned 97
	[0089.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0089.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0089.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74
	[0089.187] SetThreadPriority (hThread=0xb74, nPriority=15) returned 1
	[0089.190] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x297d, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00139_.gif", cAlternateFileName="COC49C~1.GIF")) returned 1
	[0089.193] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.193] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.193] malloc (_Size=0x1000) returned 0x3284880
	[0089.193] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif") returned 97
	[0089.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0089.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0089.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78
	[0089.193] SetThreadPriority (hThread=0xb78, nPriority=15) returned 1
	[0089.195] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ceb9e16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3bd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00142_.gif", cAlternateFileName="CO5C0A~1.GIF")) returned 1
	[0089.195] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.198] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.199] malloc (_Size=0x1000) returned 0x3286890
	[0089.202] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif") returned 97
	[0089.203] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.203] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0089.203] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0089.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c
	[0089.203] SetThreadPriority (hThread=0xb7c, nPriority=15) returned 1
	[0089.204] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf2c593, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x14c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00154_.gif", cAlternateFileName="CODA2E~1.GIF")) returned 1
	[0089.204] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.204] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.204] malloc (_Size=0x1000) returned 0x3284880
	[0089.204] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif") returned 97
	[0089.205] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.205] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0089.205] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0089.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb80
	[0089.256] SetThreadPriority (hThread=0xb80, nPriority=15) returned 1
	[0089.258] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf9ef2d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1365, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00157_.gif", cAlternateFileName="CO7258~1.GIF")) returned 1
	[0089.260] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.260] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.262] malloc (_Size=0x1000) returned 0x3285888
	[0089.262] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif") returned 97
	[0089.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0089.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0089.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84
	[0089.263] SetThreadPriority (hThread=0xb84, nPriority=15) returned 1
	[0089.266] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf9ef2d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x13ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00158_.gif", cAlternateFileName="CO28B2~1.GIF")) returned 1
	[0089.266] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.267] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.269] malloc (_Size=0x1000) returned 0x32898a8
	[0089.269] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif") returned 97
	[0089.269] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.269] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0089.269] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0089.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88
	[0089.269] SetThreadPriority (hThread=0xb88, nPriority=15) returned 1
	[0089.273] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfc4e8d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x483, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00160_.gif", cAlternateFileName="CO5B77~1.GIF")) returned 1
	[0089.275] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.275] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.275] malloc (_Size=0x1000) returned 0x3284880
	[0089.275] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif") returned 97
	[0089.275] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.275] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0089.275] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0089.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c
	[0089.276] SetThreadPriority (hThread=0xb8c, nPriority=15) returned 1
	[0089.281] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfc4e8d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1dad, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00161_.gif", cAlternateFileName="CO50DF~1.GIF")) returned 1
	[0089.281] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.281] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.281] malloc (_Size=0x1000) returned 0x3285888
	[0089.281] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif") returned 97
	[0089.281] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.281] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0089.281] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0089.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90
	[0089.281] SetThreadPriority (hThread=0xb90, nPriority=15) returned 1
	[0089.283] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1b4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00163_.gif", cAlternateFileName="CO7937~1.GIF")) returned 1
	[0089.285] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.285] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.286] malloc (_Size=0x1000) returned 0x32888a0
	[0089.286] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif") returned 97
	[0089.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0089.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0089.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94
	[0089.334] SetThreadPriority (hThread=0xb94, nPriority=15) returned 1
	[0089.338] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x33cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00164_.gif", cAlternateFileName="CO2DA9~1.GIF")) returned 1
	[0089.338] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.339] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.339] malloc (_Size=0x1000) returned 0x3285888
	[0089.339] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif") returned 97
	[0089.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0089.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0089.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c
	[0089.339] SetThreadPriority (hThread=0xb9c, nPriority=15) returned 1
	[0089.352] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x218b, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00165_.gif", cAlternateFileName="CO7D51~1.GIF")) returned 1
	[0089.352] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.352] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.352] malloc (_Size=0x1000) returned 0x3287898
	[0089.352] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif") returned 97
	[0089.352] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.352] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0089.352] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0089.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0
	[0089.352] SetThreadPriority (hThread=0xba0, nPriority=15) returned 1
	[0089.354] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d0113c9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x132b, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00167_.gif", cAlternateFileName="CO54F9~1.GIF")) returned 1
	[0089.354] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.356] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.356] malloc (_Size=0x1000) returned 0x3284880
	[0089.356] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif") returned 97
	[0089.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0089.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0089.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98
	[0089.359] SetThreadPriority (hThread=0xb98, nPriority=15) returned 1
	[0089.363] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d0113c9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x150d, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00169_.gif", cAlternateFileName="COCAE5~1.GIF")) returned 1
	[0089.365] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.365] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.365] malloc (_Size=0x1000) returned 0x32888a0
	[0089.365] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif") returned 97
	[0089.365] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.365] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0089.365] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0089.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4
	[0089.366] SetThreadPriority (hThread=0xba4, nPriority=15) returned 1
	[0089.367] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00170_.gif", cAlternateFileName="CO7BCA~1.GIF")) returned 1
	[0089.369] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.369] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.370] malloc (_Size=0x1000) returned 0x3285888
	[0089.370] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif") returned 97
	[0089.372] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.372] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0089.372] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0089.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8
	[0089.373] SetThreadPriority (hThread=0xba8, nPriority=15) returned 1
	[0089.374] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d05da47, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x139f, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00171_.gif", cAlternateFileName="COB844~1.GIF")) returned 1
	[0089.376] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.376] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.377] malloc (_Size=0x1000) returned 0x3287898
	[0089.379] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif") returned 97
	[0089.379] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.379] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0089.379] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0089.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac
	[0089.380] SetThreadPriority (hThread=0xbac, nPriority=15) returned 1
	[0089.477] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d083dfd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00172_.gif", cAlternateFileName="COBD9C~1.GIF")) returned 1
	[0089.477] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.477] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.477] malloc (_Size=0x1000) returned 0x3284880
	[0089.477] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif") returned 97
	[0089.477] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.477] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0089.477] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0089.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0
	[0089.477] SetThreadPriority (hThread=0xbb0, nPriority=15) returned 1
	[0089.479] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d083dfd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xf8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00174_.gif", cAlternateFileName="CO39FB~1.GIF")) returned 1
	[0089.480] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.480] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.481] malloc (_Size=0x1000) returned 0x3285888
	[0089.483] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif") returned 97
	[0089.483] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.483] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0089.483] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0089.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4
	[0089.484] SetThreadPriority (hThread=0xbb4, nPriority=15) returned 1
	[0089.584] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d11c3cd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00175_.gif", cAlternateFileName="COFA13~1.GIF")) returned 1
	[0089.584] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.584] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.584] malloc (_Size=0x1000) returned 0x32888a0
	[0089.584] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif") returned 97
	[0089.584] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.584] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0089.584] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0089.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8
	[0089.584] SetThreadPriority (hThread=0xbb8, nPriority=15) returned 1
	[0089.586] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___AG00176_.gif", cAlternateFileName="CO1094~1.GIF")) returned 1
	[0089.587] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.587] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.588] malloc (_Size=0x1000) returned 0x3284880
	[0089.591] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif") returned 97
	[0089.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0089.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0089.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc
	[0089.591] SetThreadPriority (hThread=0xbbc, nPriority=15) returned 1
	[0089.593] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d1426e0, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x34d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___BD10890_.gif", cAlternateFileName="CO6D84~1.GIF")) returned 1
	[0089.594] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.594] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.595] malloc (_Size=0x1000) returned 0x3286890
	[0089.597] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif") returned 97
	[0089.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0089.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0089.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0
	[0089.597] SetThreadPriority (hThread=0xbc0, nPriority=15) returned 1
	[0089.605] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d1b4fa7, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x4ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___BD10972_.gif", cAlternateFileName="CO6BFE~1.GIF")) returned 1
	[0089.605] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.605] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.605] malloc (_Size=0x1000) returned 0x32888a0
	[0089.605] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif") returned 97
	[0089.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0089.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0089.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4
	[0089.606] SetThreadPriority (hThread=0xbc4, nPriority=15) returned 1
	[0089.607] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d299ded, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x4feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___BD19563_.gif", cAlternateFileName="CO5E8D~1.GIF")) returned 1
	[0089.611] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.613] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.614] malloc (_Size=0x1000) returned 0x3284880
	[0089.614] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif") returned 97
	[0089.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0089.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0089.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc8
	[0089.615] SetThreadPriority (hThread=0xbc8, nPriority=15) returned 1
	[0089.616] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d33277e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___BD19582_.gif", cAlternateFileName="COCEE8~1.GIF")) returned 1
	[0089.616] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.622] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.622] malloc (_Size=0x1000) returned 0x32898a8
	[0089.622] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif") returned 97
	[0089.622] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.622] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0089.622] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0089.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0
	[0089.622] SetThreadPriority (hThread=0xbd0, nPriority=15) returned 1
	[0089.634] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", cAlternateFileName="CORONA~1.GIF")) returned 1
	[0089.634] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.634] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.634] malloc (_Size=0x1000) returned 0x32888a0
	[0089.634] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 126
	[0089.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0089.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0089.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd4
	[0089.634] SetThreadPriority (hThread=0xbd4, nPriority=15) returned 1
	[0089.636] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", cAlternateFileName="CORONA~2.GIF")) returned 1
	[0089.636] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.639] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.641] malloc (_Size=0x1000) returned 0x3284880
	[0089.641] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 126
	[0089.641] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.641] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0089.641] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0089.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc
	[0089.642] SetThreadPriority (hThread=0xbcc, nPriority=15) returned 1
	[0089.649] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", cAlternateFileName="CORONA~3.GIF")) returned 1
	[0089.649] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.649] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.649] malloc (_Size=0x1000) returned 0x3284880
	[0089.649] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 126
	[0089.649] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.649] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0089.649] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0089.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8
	[0089.649] SetThreadPriority (hThread=0xbd8, nPriority=15) returned 1
	[0089.654] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1a2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", cAlternateFileName="CORONA~4.GIF")) returned 1
	[0089.654] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.655] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.659] malloc (_Size=0x1000) returned 0x3284880
	[0089.659] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 126
	[0089.659] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.659] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0089.659] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0089.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc
	[0089.659] SetThreadPriority (hThread=0xbdc, nPriority=15) returned 1
	[0089.663] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xcb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", cAlternateFileName="CO2B98~1.GIF")) returned 1
	[0089.663] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.664] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.666] malloc (_Size=0x1000) returned 0x32898a8
	[0089.666] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 126
	[0089.666] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.666] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0089.666] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0089.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0
	[0089.667] SetThreadPriority (hThread=0xbe0, nPriority=15) returned 1
	[0089.669] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", cAlternateFileName="CO90F3~1.GIF")) returned 1
	[0089.672] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.672] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.672] malloc (_Size=0x1000) returned 0x3284880
	[0089.672] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 126
	[0089.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0089.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0089.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4
	[0089.673] SetThreadPriority (hThread=0xbe4, nPriority=15) returned 1
	[0089.677] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca9401b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1e15, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", cAlternateFileName="CO6194~1.GIF")) returned 1
	[0089.679] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.679] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.679] malloc (_Size=0x1000) returned 0x32898a8
	[0089.679] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 126
	[0089.679] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.679] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0089.679] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0089.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8
	[0089.680] SetThreadPriority (hThread=0xbe8, nPriority=15) returned 1
	[0089.681] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3caba2a1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2e79, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", cAlternateFileName="CO6744~1.GIF")) returned 1
	[0089.683] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.683] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.686] malloc (_Size=0x1000) returned 0x3284880
	[0089.686] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 126
	[0089.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0089.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0089.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec
	[0089.686] SetThreadPriority (hThread=0xbec, nPriority=15) returned 1
	[0089.688] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc37c80, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", cAlternateFileName="CO847E~1.GIF")) returned 1
	[0089.691] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.691] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.694] malloc (_Size=0x1000) returned 0x3287898
	[0089.694] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 126
	[0089.694] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.694] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0089.694] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0089.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0
	[0089.694] SetThreadPriority (hThread=0xbf0, nPriority=15) returned 1
	[0089.701] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", cAlternateFileName="COA4F8~1.GIF")) returned 1
	[0089.701] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.701] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.701] malloc (_Size=0x1000) returned 0x3284880
	[0089.701] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 126
	[0089.701] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.701] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0089.701] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0089.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4
	[0089.701] SetThreadPriority (hThread=0xbf4, nPriority=15) returned 1
	[0089.703] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x31b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", cAlternateFileName="COFF53~1.GIF")) returned 1
	[0089.705] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.705] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.705] malloc (_Size=0x1000) returned 0x32888a0
	[0089.705] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 126
	[0089.705] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.705] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0089.705] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0089.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc
	[0089.708] SetThreadPriority (hThread=0xbfc, nPriority=15) returned 1
	[0089.715] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cd42d18, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", cAlternateFileName="COBBE0~1.GIF")) returned 1
	[0089.716] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.716] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.717] malloc (_Size=0x1000) returned 0x3286890
	[0089.717] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 126
	[0089.717] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.717] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0089.717] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0089.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04
	[0089.717] SetThreadPriority (hThread=0xc04, nPriority=15) returned 1
	[0089.719] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdea27d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xc4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", cAlternateFileName="CODE0C~1.GIF")) returned 1
	[0089.720] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.720] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.721] malloc (_Size=0x1000) returned 0x3286890
	[0089.723] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 126
	[0089.723] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.723] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0089.723] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0089.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08
	[0089.723] SetThreadPriority (hThread=0xc08, nPriority=15) returned 1
	[0089.730] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdf8d27, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x30c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", cAlternateFileName="CO1334~1.GIF")) returned 1
	[0089.730] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.730] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.730] malloc (_Size=0x1000) returned 0x32888a0
	[0089.730] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 126
	[0089.730] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.730] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0089.730] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0089.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8
	[0089.730] SetThreadPriority (hThread=0xbf8, nPriority=15) returned 1
	[0089.734] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce1617d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1491, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", cAlternateFileName="COBC83~1.GIF")) returned 1
	[0089.735] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.736] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.737] malloc (_Size=0x1000) returned 0x3284880
	[0089.737] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 126
	[0089.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0089.737] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0089.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c
	[0089.738] SetThreadPriority (hThread=0xc0c, nPriority=15) returned 1
	[0089.742] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xa2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", cAlternateFileName="CO1371~1.GIF")) returned 1
	[0089.744] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.744] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.744] malloc (_Size=0x1000) returned 0x32888a0
	[0089.744] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 126
	[0089.744] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.744] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0089.745] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0089.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10
	[0089.745] SetThreadPriority (hThread=0xc10, nPriority=15) returned 1
	[0089.748] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2989, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", cAlternateFileName="COE4A3~1.GIF")) returned 1
	[0089.748] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.748] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.748] malloc (_Size=0x1000) returned 0x3286890
	[0089.748] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 126
	[0089.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0089.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0089.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14
	[0089.753] SetThreadPriority (hThread=0xc14, nPriority=15) returned 1
	[0089.757] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ceb9e16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3bdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", cAlternateFileName="COF057~1.GIF")) returned 1
	[0089.758] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.760] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.760] malloc (_Size=0x1000) returned 0x3287898
	[0089.760] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 126
	[0089.760] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.760] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0089.760] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0089.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18
	[0089.761] SetThreadPriority (hThread=0xc18, nPriority=15) returned 1
	[0089.763] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf2c593, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", cAlternateFileName="CO7F6B~1.GIF")) returned 1
	[0089.763] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.766] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.767] malloc (_Size=0x1000) returned 0x3284880
	[0089.769] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 126
	[0089.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0089.770] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0089.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c
	[0089.770] SetThreadPriority (hThread=0xc1c, nPriority=15) returned 1
	[0089.773] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf9ef2d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", cAlternateFileName="CODD0B~1.GIF")) returned 1
	[0089.776] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.776] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.776] malloc (_Size=0x1000) returned 0x3286890
	[0089.776] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 126
	[0089.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0089.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0089.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20
	[0089.777] SetThreadPriority (hThread=0xc20, nPriority=15) returned 1
	[0089.778] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf9ef2d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x13b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", cAlternateFileName="COCCFF~1.GIF")) returned 1
	[0089.780] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.780] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.781] malloc (_Size=0x1000) returned 0x3284880
	[0089.782] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 126
	[0089.783] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.783] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0089.783] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0089.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24
	[0089.783] SetThreadPriority (hThread=0xc24, nPriority=15) returned 1
	[0089.785] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfc4e8d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", cAlternateFileName="COB63A~1.GIF")) returned 1
	[0089.789] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.789] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.789] malloc (_Size=0x1000) returned 0x3284880
	[0089.789] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 126
	[0089.789] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.789] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0089.789] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0089.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28
	[0089.790] SetThreadPriority (hThread=0xc28, nPriority=15) returned 1
	[0089.793] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfc4e8d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1db9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", cAlternateFileName="CO547D~1.GIF")) returned 1
	[0089.793] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.793] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.793] malloc (_Size=0x1000) returned 0x32888a0
	[0089.793] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 126
	[0089.793] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.793] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0089.793] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0089.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c
	[0089.850] SetThreadPriority (hThread=0xc2c, nPriority=15) returned 1
	[0089.854] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", cAlternateFileName="CO3B06~1.GIF")) returned 1
	[0089.856] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.857] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.857] malloc (_Size=0x1000) returned 0x3284880
	[0089.857] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 126
	[0089.857] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.857] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0089.857] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0089.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30
	[0089.857] SetThreadPriority (hThread=0xc30, nPriority=15) returned 1
	[0089.859] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x33d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", cAlternateFileName="COF809~1.GIF")) returned 1
	[0089.859] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.862] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.863] malloc (_Size=0x1000) returned 0x32898a8
	[0089.864] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 126
	[0089.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0089.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0089.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34
	[0089.864] SetThreadPriority (hThread=0xc34, nPriority=15) returned 1
	[0089.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2195, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", cAlternateFileName="CO12AE~1.GIF")) returned 1
	[0089.872] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.872] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.872] malloc (_Size=0x1000) returned 0x32898a8
	[0089.873] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 126
	[0089.873] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.873] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0089.873] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0089.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38
	[0089.873] SetThreadPriority (hThread=0xc38, nPriority=15) returned 1
	[0089.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d0113c9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1335, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", cAlternateFileName="CO889A~1.GIF")) returned 1
	[0089.877] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.878] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.882] malloc (_Size=0x1000) returned 0x3285888
	[0089.882] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 126
	[0089.882] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.882] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0089.882] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0089.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c
	[0089.882] SetThreadPriority (hThread=0xc3c, nPriority=15) returned 1
	[0089.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d0113c9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1519, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", cAlternateFileName="CO6F23~1.GIF")) returned 1
	[0089.884] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.885] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.886] malloc (_Size=0x1000) returned 0x32888a0
	[0089.886] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 126
	[0089.889] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.889] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0089.889] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0089.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40
	[0089.889] SetThreadPriority (hThread=0xc40, nPriority=15) returned 1
	[0089.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", cAlternateFileName="CO1018~1.GIF")) returned 1
	[0089.891] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.892] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.893] malloc (_Size=0x1000) returned 0x3284880
	[0089.893] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 126
	[0089.893] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.895] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0089.895] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0089.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44
	[0089.896] SetThreadPriority (hThread=0xc44, nPriority=15) returned 1
	[0089.902] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d05da47, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", cAlternateFileName="CO1407~1.GIF")) returned 1
	[0089.902] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.902] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.902] malloc (_Size=0x1000) returned 0x32898a8
	[0089.902] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 126
	[0089.902] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.903] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0089.903] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0089.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48
	[0089.903] SetThreadPriority (hThread=0xc48, nPriority=15) returned 1
	[0089.904] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d083dfd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", cAlternateFileName="CO8604~1.GIF")) returned 1
	[0089.905] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.907] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.907] malloc (_Size=0x1000) returned 0x3287898
	[0089.909] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 126
	[0089.909] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.909] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0089.909] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0089.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c
	[0089.910] SetThreadPriority (hThread=0xc4c, nPriority=15) returned 1
	[0089.911] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d083dfd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xf95, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", cAlternateFileName="CODD39~1.GIF")) returned 1
	[0089.913] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.913] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.916] malloc (_Size=0x1000) returned 0x3285888
	[0089.916] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 126
	[0089.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0089.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0089.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50
	[0089.916] SetThreadPriority (hThread=0xc50, nPriority=15) returned 1
	[0089.919] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d11c3cd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", cAlternateFileName="CO56D5~1.GIF")) returned 1
	[0089.919] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0089.919] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0089.919] malloc (_Size=0x1000) returned 0x3284880
	[0089.919] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 126
	[0089.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0089.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0089.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0089.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54
	[0089.926] SetThreadPriority (hThread=0xc54, nPriority=15) returned 1
	[0090.128] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", cAlternateFileName="COB4D1~1.GIF")) returned 1
	[0090.131] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.131] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.131] malloc (_Size=0x1000) returned 0x3284880
	[0090.131] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 126
	[0090.131] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.131] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0090.131] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0090.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58
	[0090.131] SetThreadPriority (hThread=0xc58, nPriority=15) returned 1
	[0090.135] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d1426e0, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x34d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", cAlternateFileName="COC847~1.GIF")) returned 1
	[0090.137] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.137] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.137] malloc (_Size=0x1000) returned 0x3284880
	[0090.137] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 126
	[0090.137] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.137] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0090.137] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0090.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c
	[0090.137] SetThreadPriority (hThread=0xc5c, nPriority=15) returned 1
	[0090.139] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d1b4fa7, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x4ef1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", cAlternateFileName="COC6B1~1.GIF")) returned 1
	[0090.139] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.142] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.144] malloc (_Size=0x1000) returned 0x3284880
	[0090.144] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 126
	[0090.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0090.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0090.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60
	[0090.145] SetThreadPriority (hThread=0xc60, nPriority=15) returned 1
	[0090.197] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d299ded, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", cAlternateFileName="CO823E~1.GIF")) returned 1
	[0090.197] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.197] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.200] malloc (_Size=0x1000) returned 0x32898a8
	[0090.200] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 126
	[0090.200] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.200] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0090.200] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0090.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64
	[0090.200] SetThreadPriority (hThread=0xc64, nPriority=15) returned 1
	[0090.206] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d33277e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", cAlternateFileName="CO2AAB~1.GIF")) returned 1
	[0090.209] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.209] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.209] malloc (_Size=0x1000) returned 0x3285888
	[0090.209] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 126
	[0090.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0090.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0090.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68
	[0090.209] SetThreadPriority (hThread=0xc68, nPriority=15) returned 1
	[0090.211] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", cAlternateFileName="CORONA~1.GIF")) returned 1
	[0090.214] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.215] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.215] malloc (_Size=0x1000) returned 0x32898a8
	[0090.215] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 155
	[0090.215] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.215] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0090.215] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0090.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c
	[0090.218] SetThreadPriority (hThread=0xc6c, nPriority=15) returned 1
	[0090.225] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", cAlternateFileName="CORONA~2.GIF")) returned 1
	[0090.225] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.225] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.225] malloc (_Size=0x1000) returned 0x3286890
	[0090.225] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 155
	[0090.225] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.225] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0090.225] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0090.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70
	[0090.226] SetThreadPriority (hThread=0xc70, nPriority=15) returned 1
	[0090.227] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", cAlternateFileName="CORONA~3.GIF")) returned 1
	[0090.230] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.231] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.232] malloc (_Size=0x1000) returned 0x32898a8
	[0090.233] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 155
	[0090.233] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.233] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0090.233] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0090.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74
	[0090.233] SetThreadPriority (hThread=0xc74, nPriority=15) returned 1
	[0090.235] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1a39, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", cAlternateFileName="CORONA~4.GIF")) returned 1
	[0090.235] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.238] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.239] malloc (_Size=0x1000) returned 0x3284880
	[0090.241] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 155
	[0090.241] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.241] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0090.241] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0090.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78
	[0090.242] SetThreadPriority (hThread=0xc78, nPriority=15) returned 1
	[0090.245] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xcc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", cAlternateFileName="CO9159~1.GIF")) returned 1
	[0090.246] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.248] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.248] malloc (_Size=0x1000) returned 0x3287898
	[0090.248] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 155
	[0090.248] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.248] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0090.248] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0090.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c
	[0090.248] SetThreadPriority (hThread=0xc7c, nPriority=15) returned 1
	[0090.250] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", cAlternateFileName="COE1E0~1.GIF")) returned 1
	[0090.251] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.251] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.252] malloc (_Size=0x1000) returned 0x32888a0
	[0090.254] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 155
	[0090.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0090.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0090.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80
	[0090.255] SetThreadPriority (hThread=0xc80, nPriority=15) returned 1
	[0090.259] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca9401b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1e19, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", cAlternateFileName="COCBF9~1.GIF")) returned 1
	[0090.259] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.260] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.262] malloc (_Size=0x1000) returned 0x3284880
	[0090.262] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 155
	[0090.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0090.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0090.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84
	[0090.262] SetThreadPriority (hThread=0xc84, nPriority=15) returned 1
	[0090.264] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3caba2a1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2e81, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", cAlternateFileName="COAAE3~1.GIF")) returned 1
	[0090.264] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.267] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.267] malloc (_Size=0x1000) returned 0x32888a0
	[0090.267] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 155
	[0090.267] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.267] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0090.267] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0090.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c
	[0090.269] SetThreadPriority (hThread=0xc8c, nPriority=15) returned 1
	[0090.273] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc37c80, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", cAlternateFileName="CO3160~1.GIF")) returned 1
	[0090.275] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.275] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.278] malloc (_Size=0x1000) returned 0x3284880
	[0090.278] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 155
	[0090.278] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.278] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0090.278] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0090.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88
	[0090.278] SetThreadPriority (hThread=0xc88, nPriority=15) returned 1
	[0090.284] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", cAlternateFileName="CO18F8~1.GIF")) returned 1
	[0090.284] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.284] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.284] malloc (_Size=0x1000) returned 0x3284880
	[0090.284] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 155
	[0090.284] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.284] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0090.284] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0090.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90
	[0090.284] SetThreadPriority (hThread=0xc90, nPriority=15) returned 1
	[0090.286] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x31b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", cAlternateFileName="COCC8E~1.GIF")) returned 1
	[0090.289] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.289] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.290] malloc (_Size=0x1000) returned 0x3284880
	[0090.290] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 155
	[0090.290] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.290] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0090.290] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0090.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94
	[0090.290] SetThreadPriority (hThread=0xc94, nPriority=15) returned 1
	[0090.297] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cd42d18, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xdb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", cAlternateFileName="CO5647~1.GIF")) returned 1
	[0090.297] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.298] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.310] malloc (_Size=0x1000) returned 0x3285888
	[0090.310] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 155
	[0090.310] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.310] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0090.310] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0090.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98
	[0090.311] SetThreadPriority (hThread=0xc98, nPriority=15) returned 1
	[0090.314] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdea27d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", cAlternateFileName="COEDD5~1.GIF")) returned 1
	[0090.315] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.317] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.317] malloc (_Size=0x1000) returned 0x3284880
	[0090.317] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 155
	[0090.317] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.317] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0090.317] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0090.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c
	[0090.317] SetThreadPriority (hThread=0xc9c, nPriority=15) returned 1
	[0090.319] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdf8d27, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x30c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", cAlternateFileName="COCF16~1.GIF")) returned 1
	[0090.321] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.321] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.323] malloc (_Size=0x1000) returned 0x3284880
	[0090.324] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 155
	[0090.324] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.324] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0090.324] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0090.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0
	[0090.324] SetThreadPriority (hThread=0xca0, nPriority=15) returned 1
	[0090.325] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce1617d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1491, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", cAlternateFileName="CO700B~1.GIF")) returned 1
	[0090.326] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.328] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.329] malloc (_Size=0x1000) returned 0x3284880
	[0090.331] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 155
	[0090.331] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.331] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0090.331] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0090.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4
	[0090.332] SetThreadPriority (hThread=0xca4, nPriority=15) returned 1
	[0090.333] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xa39, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", cAlternateFileName="CO668F~1.GIF")) returned 1
	[0090.335] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.338] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.338] malloc (_Size=0x1000) returned 0x32898a8
	[0090.338] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 155
	[0090.338] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.338] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0090.338] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0090.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8
	[0090.338] SetThreadPriority (hThread=0xca8, nPriority=15) returned 1
	[0090.399] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", cAlternateFileName="CO67A1~1.GIF")) returned 1
	[0090.399] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.399] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.399] malloc (_Size=0x1000) returned 0x3284880
	[0090.399] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 155
	[0090.399] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.399] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0090.399] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0090.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac
	[0090.400] SetThreadPriority (hThread=0xcac, nPriority=15) returned 1
	[0090.407] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ceb9e16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", cAlternateFileName="CO818D~1.GIF")) returned 1
	[0090.408] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.408] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.408] malloc (_Size=0x1000) returned 0x32888a0
	[0090.408] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 155
	[0090.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0090.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0090.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0
	[0090.409] SetThreadPriority (hThread=0xcb0, nPriority=15) returned 1
	[0090.415] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf2c593, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x14d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", cAlternateFileName="CO2C5D~1.GIF")) returned 1
	[0090.415] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.415] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.415] malloc (_Size=0x1000) returned 0x32898a8
	[0090.415] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 155
	[0090.415] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.415] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0090.415] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0090.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8
	[0090.415] SetThreadPriority (hThread=0xcb8, nPriority=15) returned 1
	[0090.417] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf9ef2d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1371, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", cAlternateFileName="COEED6~1.GIF")) returned 1
	[0090.418] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.418] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.419] malloc (_Size=0x1000) returned 0x3284880
	[0090.419] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 155
	[0090.419] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.419] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0090.419] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0090.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0
	[0090.420] SetThreadPriority (hThread=0xcc0, nPriority=15) returned 1
	[0090.424] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cf9ef2d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x13b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", cAlternateFileName="CO4538~1.GIF")) returned 1
	[0090.425] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.425] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.425] malloc (_Size=0x1000) returned 0x328c8c0
	[0090.425] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 155
	[0090.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0090.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0090.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8
	[0090.426] SetThreadPriority (hThread=0xcc8, nPriority=15) returned 1
	[0090.429] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfc4e8d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", cAlternateFileName="CO0A48~1.GIF")) returned 1
	[0090.429] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.430] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.430] malloc (_Size=0x1000) returned 0x3285888
	[0090.430] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 155
	[0090.430] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.430] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0090.430] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0090.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0
	[0090.431] SetThreadPriority (hThread=0xcd0, nPriority=15) returned 1
	[0090.434] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfc4e8d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1dc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", cAlternateFileName="CO2E57~1.GIF")) returned 1
	[0090.434] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.434] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.434] malloc (_Size=0x1000) returned 0x3286890
	[0090.434] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 155
	[0090.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0090.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0090.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8
	[0090.435] SetThreadPriority (hThread=0xcd8, nPriority=15) returned 1
	[0090.436] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1b69, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", cAlternateFileName="COE7F7~1.GIF")) returned 1
	[0090.439] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.439] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.439] malloc (_Size=0x1000) returned 0x3287898
	[0090.439] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 155
	[0090.439] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.439] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0090.439] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0090.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0
	[0090.439] SetThreadPriority (hThread=0xce0, nPriority=15) returned 1
	[0090.441] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x33d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", cAlternateFileName="CO4C17~1.GIF")) returned 1
	[0090.444] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.444] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.444] malloc (_Size=0x1000) returned 0x32908e0
	[0090.444] _swprintf (in: param_1=0x32908e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 155
	[0090.444] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.444] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0090.444] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0090.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32908e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8
	[0090.445] SetThreadPriority (hThread=0xce8, nPriority=15) returned 1
	[0090.446] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cfeb13d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2199, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", cAlternateFileName="CO5EE3~1.GIF")) returned 1
	[0090.447] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.450] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.450] malloc (_Size=0x1000) returned 0x328e8d0
	[0090.450] _swprintf (in: param_1=0x328e8d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 155
	[0090.451] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.451] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0090.451] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0090.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328e8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0
	[0090.451] SetThreadPriority (hThread=0xcf0, nPriority=15) returned 1
	[0090.452] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d0113c9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1339, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", cAlternateFileName="CO899D~1.GIF")) returned 1
	[0090.455] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.455] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.456] malloc (_Size=0x1000) returned 0x32938f8
	[0090.456] _swprintf (in: param_1=0x32938f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 155
	[0090.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0090.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0090.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32938f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8
	[0090.456] SetThreadPriority (hThread=0xcf8, nPriority=15) returned 1
	[0090.458] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d0113c9, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1521, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", cAlternateFileName="COA205~1.GIF")) returned 1
	[0090.460] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.460] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.460] malloc (_Size=0x1000) returned 0x328f8d8
	[0090.461] _swprintf (in: param_1=0x328f8d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 155
	[0090.461] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.461] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0090.461] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0090.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328f8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00
	[0090.461] SetThreadPriority (hThread=0xd00, nPriority=15) returned 1
	[0090.463] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", cAlternateFileName="COF120~1.GIF")) returned 1
	[0090.464] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.464] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.465] malloc (_Size=0x1000) returned 0x328d8c8
	[0090.465] _swprintf (in: param_1=0x328d8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 155
	[0090.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0090.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0090.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08
	[0090.466] SetThreadPriority (hThread=0xd08, nPriority=15) returned 1
	[0090.467] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d05da47, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x13b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", cAlternateFileName="COA8EA~1.GIF")) returned 1
	[0090.470] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.470] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.471] malloc (_Size=0x1000) returned 0x3297918
	[0090.471] _swprintf (in: param_1=0x3297918, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 155
	[0090.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0090.471] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0090.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3297918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10
	[0090.471] SetThreadPriority (hThread=0xd10, nPriority=15) returned 1
	[0090.473] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d083dfd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1139, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", cAlternateFileName="CO8B24~1.GIF")) returned 1
	[0090.475] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.475] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.475] malloc (_Size=0x1000) returned 0x3294900
	[0090.475] _swprintf (in: param_1=0x3294900, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 155
	[0090.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0090.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0090.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3294900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18
	[0090.480] SetThreadPriority (hThread=0xd18, nPriority=15) returned 1
	[0090.481] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d083dfd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xf99, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", cAlternateFileName="COA49B~1.GIF")) returned 1
	[0090.483] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.483] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.484] malloc (_Size=0x1000) returned 0x32928f0
	[0090.484] _swprintf (in: param_1=0x32928f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 155
	[0090.484] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.484] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0090.484] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0090.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32928f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20
	[0090.485] SetThreadPriority (hThread=0xd20, nPriority=15) returned 1
	[0090.538] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d11c3cd, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xd39, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", cAlternateFileName="CO661C~1.GIF")) returned 1
	[0090.538] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.538] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.538] malloc (_Size=0x1000) returned 0x3296910
	[0090.538] _swprintf (in: param_1=0x3296910, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 155
	[0090.538] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.538] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0090.538] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0090.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3296910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28
	[0090.538] SetThreadPriority (hThread=0xd28, nPriority=15) returned 1
	[0090.540] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", cAlternateFileName="COCDF2~1.GIF")) returned 1
	[0090.540] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.542] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.542] malloc (_Size=0x1000) returned 0x32918e8
	[0090.542] _swprintf (in: param_1=0x32918e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 155
	[0090.542] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.542] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0090.542] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0090.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32918e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30
	[0090.543] SetThreadPriority (hThread=0xd30, nPriority=15) returned 1
	[0090.544] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d1426e0, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x34e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", cAlternateFileName="COF3AA~1.GIF")) returned 1
	[0090.545] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.545] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.546] malloc (_Size=0x1000) returned 0x329a930
	[0090.546] _swprintf (in: param_1=0x329a930, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 155
	[0090.546] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.546] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0090.546] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0090.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x329a930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38
	[0090.547] SetThreadPriority (hThread=0xd38, nPriority=15) returned 1
	[0090.549] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d1b4fa7, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x4ef1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", cAlternateFileName="CO3986~1.GIF")) returned 1
	[0090.549] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.551] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.552] malloc (_Size=0x1000) returned 0x329d948
	[0090.552] _swprintf (in: param_1=0x329d948, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 155
	[0090.555] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.555] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0090.555] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0090.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x329d948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40
	[0090.556] SetThreadPriority (hThread=0xd40, nPriority=15) returned 1
	[0090.557] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d299ded, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x4ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", cAlternateFileName="COFF96~1.GIF")) returned 1
	[0090.562] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.562] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.562] malloc (_Size=0x1000) returned 0x329c940
	[0090.562] _swprintf (in: param_1=0x329c940, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 155
	[0090.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0090.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0090.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x329c940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48
	[0090.563] SetThreadPriority (hThread=0xd48, nPriority=15) returned 1
	[0090.564] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3d33277e, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", cAlternateFileName="CO9246~1.GIF")) returned 1
	[0090.564] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.570] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.570] malloc (_Size=0x1000) returned 0x3298920
	[0090.570] _swprintf (in: param_1=0x3298920, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 155
	[0090.570] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.570] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0090.570] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0090.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3298920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50
	[0090.571] SetThreadPriority (hThread=0xd50, nPriority=15) returned 1
	[0090.572] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", cAlternateFileName="CORONA~1.GIF")) returned 1
	[0090.572] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.576] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.576] malloc (_Size=0x1000) returned 0x329e950
	[0090.576] _swprintf (in: param_1=0x329e950, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 184
	[0090.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0090.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0090.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x329e950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd58
	[0090.577] SetThreadPriority (hThread=0xd58, nPriority=15) returned 1
	[0090.579] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", cAlternateFileName="CORONA~2.GIF")) returned 1
	[0090.579] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.581] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.582] malloc (_Size=0x1000) returned 0x329f958
	[0090.582] _swprintf (in: param_1=0x329f958, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 184
	[0090.582] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.582] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0090.582] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0090.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x329f958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60
	[0090.582] SetThreadPriority (hThread=0xd60, nPriority=15) returned 1
	[0090.677] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x3a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", cAlternateFileName="CORONA~3.GIF")) returned 1
	[0090.678] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.678] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.678] malloc (_Size=0x1000) returned 0x3299928
	[0090.678] _swprintf (in: param_1=0x3299928, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 184
	[0090.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0090.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0090.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3299928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68
	[0090.678] SetThreadPriority (hThread=0xd68, nPriority=15) returned 1
	[0090.680] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", cAlternateFileName="CORONA~4.GIF")) returned 1
	[0090.680] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.685] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.686] malloc (_Size=0x1000) returned 0x32a0960
	[0090.686] _swprintf (in: param_1=0x32a0960, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 184
	[0090.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0090.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0090.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32a0960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70
	[0090.687] SetThreadPriority (hThread=0xd70, nPriority=15) returned 1
	[0090.688] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca6de16, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xcc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", cAlternateFileName="CO6E9F~1.GIF")) returned 1
	[0090.690] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.690] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.691] malloc (_Size=0x1000) returned 0x32a1968
	[0090.691] _swprintf (in: param_1=0x32a1968, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 184
	[0090.691] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.691] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0090.691] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0090.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32a1968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78
	[0090.692] SetThreadPriority (hThread=0xd78, nPriority=15) returned 1
	[0090.695] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", cAlternateFileName="CO5DEC~1.GIF")) returned 1
	[0090.695] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.695] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.696] malloc (_Size=0x1000) returned 0x32a2970
	[0090.696] _swprintf (in: param_1=0x32a2970, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 184
	[0090.696] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.696] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0090.696] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0090.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32a2970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80
	[0090.696] SetThreadPriority (hThread=0xd80, nPriority=15) returned 1
	[0090.700] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ca9401b, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1e21, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", cAlternateFileName="COA49B~2.GIF")) returned 1
	[0090.701] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.701] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.701] malloc (_Size=0x1000) returned 0x329b938
	[0090.701] _swprintf (in: param_1=0x329b938, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 184
	[0090.701] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.701] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0090.701] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0090.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x329b938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88
	[0090.701] SetThreadPriority (hThread=0xd88, nPriority=15) returned 1
	[0090.703] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3caba2a1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2e81, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", cAlternateFileName="CO0B79~1.GIF")) returned 1
	[0090.705] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.705] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.706] malloc (_Size=0x1000) returned 0x3277890
	[0090.706] _swprintf (in: param_1=0x3277890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 184
	[0090.706] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.706] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0090.706] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0090.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3277890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90
	[0090.706] SetThreadPriority (hThread=0xd90, nPriority=15) returned 1
	[0090.708] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc37c80, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", cAlternateFileName="CO4177~1.GIF")) returned 1
	[0090.708] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.711] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.711] malloc (_Size=0x1000) returned 0x3278898
	[0090.712] _swprintf (in: param_1=0x3278898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 184
	[0090.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0090.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0090.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3278898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98
	[0090.712] SetThreadPriority (hThread=0xd98, nPriority=15) returned 1
	[0090.715] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", cAlternateFileName="CO2800~1.GIF")) returned 1
	[0090.715] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.715] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.715] malloc (_Size=0x1000) returned 0x327b8b0
	[0090.715] _swprintf (in: param_1=0x327b8b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 184
	[0090.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0090.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0090.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x327b8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0
	[0090.718] SetThreadPriority (hThread=0xda0, nPriority=15) returned 1
	[0090.720] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cc5dc4c, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x31c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", cAlternateFileName="CO336A~1.GIF")) returned 1
	[0090.721] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.722] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.722] malloc (_Size=0x1000) returned 0x32798a0
	[0090.722] _swprintf (in: param_1=0x32798a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 184
	[0090.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0090.722] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0090.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32798a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8
	[0090.722] SetThreadPriority (hThread=0xda8, nPriority=15) returned 1
	[0090.818] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cd42d18, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", cAlternateFileName="CO78E9~1.GIF")) returned 1
	[0090.818] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.818] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.818] malloc (_Size=0x1000) returned 0x3284880
	[0090.818] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 184
	[0090.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0090.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0090.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac
	[0090.819] SetThreadPriority (hThread=0xdac, nPriority=15) returned 1
	[0090.825] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdea27d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xc61, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", cAlternateFileName="CO1213~1.GIF")) returned 1
	[0090.825] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.825] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.825] malloc (_Size=0x1000) returned 0x32898a8
	[0090.825] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 184
	[0090.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0090.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0090.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c
	[0090.832] SetThreadPriority (hThread=0xd9c, nPriority=15) returned 1
	[0090.835] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3cdf8d27, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x30d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", cAlternateFileName="CO30D2~1.GIF")) returned 1
	[0090.836] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.836] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.838] malloc (_Size=0x1000) returned 0x3284880
	[0090.838] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 184
	[0090.838] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.838] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0090.838] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0090.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3284880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4
	[0090.839] SetThreadPriority (hThread=0xda4, nPriority=15) returned 1
	[0090.840] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce1617d, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x1491, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", cAlternateFileName="CO1075~1.GIF")) returned 1
	[0090.840] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.843] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.843] malloc (_Size=0x1000) returned 0x3286890
	[0090.844] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 184
	[0090.847] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.847] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0090.847] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0090.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94
	[0090.847] SetThreadPriority (hThread=0xd94, nPriority=15) returned 1
	[0090.848] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0xa41, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", cAlternateFileName="CO5678~1.GIF")) returned 1
	[0090.848] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.850] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.851] malloc (_Size=0x1000) returned 0x3287898
	[0090.852] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 184
	[0090.853] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.853] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0090.853] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0090.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c
	[0090.854] SetThreadPriority (hThread=0xd8c, nPriority=15) returned 1
	[0090.855] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ce93e74, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", cAlternateFileName="CO09E3~1.GIF")) returned 1
	[0090.859] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0090.859] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0090.860] malloc (_Size=0x1000) returned 0x3286890
	[0090.862] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 184
	[0090.862] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.862] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0090.862] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0090.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84
	[0090.863] SetThreadPriority (hThread=0xd84, nPriority=15) returned 1
	[0090.864] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ca2190e, ftCreationTime.dwHighDateTime=0x1d5f81b, ftLastAccessTime.dwLowDateTime=0x3ca2190e, ftLastAccessTime.dwHighDateTime=0x1d5f81b, ftLastWriteTime.dwLowDateTime=0x2613d6f1, ftLastWriteTime.dwHighDateTime=0x1d5f81b, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0090.864] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0090.867] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0090.868] malloc (_Size=0x1000) returned 0x3284880
	[0090.870] _swprintf (in: param_1=0x3284880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CoronaVirus.txt") returned 71
	[0090.870] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0090.870] wcsncmp (_String1="CR", _String2="..", _MaxCount=0x2) returned 21
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0090.870] wcsncmp (_String1="CR", _String2="..", _MaxCount=0x2) returned 21
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0090.870] wcsncmp (_String1="CU", _String2="..", _MaxCount=0x2) returned 21
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0090.870] wcsncmp (_String1="CU", _String2="..", _MaxCount=0x2) returned 21
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.870] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.870] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.870] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0090.870] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.870] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.870] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0090.871] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.871] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.871] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.872] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0090.872] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.872] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0090.873] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.873] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.873] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0090.874] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.874] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.874] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0090.875] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.875] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.875] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.876] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.876] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1
	[0090.876] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0090.877] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.877] wcsncmp (_String1="EA", _String2="..", _MaxCount=0x2) returned 23
	[0090.877] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1
	[0090.877] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.877] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.878] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1
	[0090.878] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.878] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0090.879] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1
	[0090.879] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0090.879] wcsncmp (_String1="EX", _String2="..", _MaxCount=0x2) returned 23
	[0090.879] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1
	[0090.881] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.881] wcsncmp (_String1="FA", _String2="..", _MaxCount=0x2) returned 24
	[0090.881] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1
	[0090.881] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.881] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.881] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1
	[0090.881] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.881] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.881] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1
	[0090.881] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.881] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.881] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1
	[0090.881] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.881] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.881] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.882] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.882] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1
	[0090.882] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.883] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.883] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1
	[0090.883] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.884] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1
	[0090.884] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.884] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1
	[0090.884] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.884] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1
	[0090.884] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.884] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1
	[0090.884] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.884] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1
	[0090.884] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.884] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1
	[0090.884] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.884] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.884] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1
	[0090.887] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.887] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.887] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1
	[0090.887] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.887] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.887] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1
	[0090.887] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.887] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.887] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1
	[0090.887] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.887] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.887] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1
	[0090.887] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.887] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.887] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1
	[0090.887] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.887] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.887] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1
	[0090.887] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.887] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1
	[0090.888] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.888] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.888] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.889] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.889] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.889] wcsncmp (_String1="FI", _String2="..", _MaxCount=0x2) returned 24
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.889] wcsncmp (_String1="FI", _String2="..", _MaxCount=0x2) returned 24
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0090.889] wcsncmp (_String1="FL", _String2="..", _MaxCount=0x2) returned 24
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0090.889] wcsncmp (_String1="GR", _String2="..", _MaxCount=0x2) returned 25
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0090.889] wcsncmp (_String1="GR", _String2="..", _MaxCount=0x2) returned 25
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.889] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.889] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.889] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.889] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.889] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1
	[0090.889] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.890] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.890] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1
	[0090.890] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.890] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.890] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1
	[0090.890] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.890] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.890] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1
	[0090.890] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.890] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.890] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1
	[0090.890] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.890] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.890] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1
	[0090.891] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.891] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1
	[0090.891] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.891] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1
	[0090.891] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.891] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1
	[0090.891] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.891] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1
	[0090.891] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.891] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1
	[0090.891] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.891] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.891] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1
	[0090.892] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.892] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.892] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.893] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.893] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1
	[0090.893] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.894] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.894] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1
	[0090.894] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.894] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.894] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1
	[0090.894] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.894] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.894] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1
	[0090.894] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.894] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.894] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1
	[0090.894] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.894] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.894] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1
	[0090.894] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.894] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.894] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HM", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HM", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HM", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HM", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HM", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0090.895] wcsncmp (_String1="HT", _String2="..", _MaxCount=0x2) returned 26
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.895] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.895] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1
	[0090.895] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.895] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.896] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1
	[0090.896] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.896] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.897] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1
	[0090.897] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.897] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.897] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1
	[0090.897] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.897] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.897] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1
	[0090.897] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0090.897] wcsncmp (_String1="IN", _String2="..", _MaxCount=0x2) returned 27
	[0090.897] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1
	[0090.897] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.897] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.897] malloc (_Size=0x1000) returned 0x328c8c0
	[0090.897] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif") returned 68
	[0090.897] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", _SubStr="CoronaVirus") returned 0x0
	[0090.897] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", _SubStr="wasse") returned 0x0
	[0090.897] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", _SubStr="passw") returned 0x0
	[0090.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c
	[0090.897] SetThreadPriority (hThread=0xd7c, nPriority=15) returned 1
	[0090.898] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1
	[0090.900] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.900] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.900] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1
	[0090.900] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.900] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.900] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1
	[0090.900] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.900] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.901] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1
	[0090.901] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.901] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.901] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1
	[0090.901] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.901] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.901] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1
	[0090.901] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.901] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.901] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1
	[0090.901] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0090.901] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0090.902] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1
	[0090.902] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.195] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.195] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1
	[0091.195] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.195] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.195] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1
	[0091.195] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.195] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.195] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1
	[0091.198] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.198] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.198] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1
	[0091.198] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.198] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.198] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1
	[0091.198] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.198] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.198] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1
	[0091.198] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.199] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.199] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1
	[0091.199] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.199] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.199] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1
	[0091.199] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.199] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.199] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1
	[0091.199] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.199] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.199] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1
	[0091.199] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.199] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.199] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1
	[0091.199] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.199] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.200] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1
	[0091.200] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.200] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.200] FindNextFileW (in: hFindFile=0x63bfe0, lpFindFileData=0x315b0d8 | out: lpFindFileData=0x315b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1
	[0091.200] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0091.200] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0091.200] malloc (_Size=0x1000) returned 0x3287898
	[0091.200] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg") returned 68
	[0091.200] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.200] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", _SubStr="wasse") returned 0x0
	[0091.200] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", _SubStr="passw") returned 0x0
	[0091.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74
	[0091.200] SetThreadPriority (hThread=0xd74, nPriority=15) returned 1
	[0091.204] malloc (_Size=0x1000) returned 0x32888a0
	[0091.204] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg") returned 68
	[0091.211] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.211] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", _SubStr="wasse") returned 0x0
	[0091.211] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", _SubStr="passw") returned 0x0
	[0091.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64
	[0091.211] SetThreadPriority (hThread=0xd64, nPriority=15) returned 1
	[0091.223] malloc (_Size=0x1000) returned 0x3286890
	[0091.223] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg") returned 68
	[0091.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", _SubStr="wasse") returned 0x0
	[0091.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", _SubStr="passw") returned 0x0
	[0091.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54
	[0091.227] SetThreadPriority (hThread=0xd54, nPriority=15) returned 1
	[0091.229] malloc (_Size=0x1000) returned 0x328c8c0
	[0091.229] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg") returned 68
	[0091.229] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.229] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", _SubStr="wasse") returned 0x0
	[0091.229] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", _SubStr="passw") returned 0x0
	[0091.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c
	[0091.234] SetThreadPriority (hThread=0xd6c, nPriority=15) returned 1
	[0091.243] malloc (_Size=0x1000) returned 0x32888a0
	[0091.243] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg") returned 68
	[0091.243] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.243] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", _SubStr="wasse") returned 0x0
	[0091.243] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", _SubStr="passw") returned 0x0
	[0091.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44
	[0091.244] SetThreadPriority (hThread=0xd44, nPriority=15) returned 1
	[0091.251] malloc (_Size=0x1000) returned 0x3286890
	[0091.253] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg") returned 68
	[0091.253] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.256] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", _SubStr="wasse") returned 0x0
	[0091.256] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", _SubStr="passw") returned 0x0
	[0091.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c
	[0091.256] SetThreadPriority (hThread=0xd5c, nPriority=15) returned 1
	[0091.258] malloc (_Size=0x1000) returned 0x328c8c0
	[0091.260] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg") returned 68
	[0091.260] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.260] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", _SubStr="wasse") returned 0x0
	[0091.260] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", _SubStr="passw") returned 0x0
	[0091.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c
	[0091.261] SetThreadPriority (hThread=0xd4c, nPriority=15) returned 1
	[0091.267] malloc (_Size=0x1000) returned 0x3287898
	[0091.268] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg") returned 68
	[0091.268] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.268] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", _SubStr="wasse") returned 0x0
	[0091.268] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", _SubStr="passw") returned 0x0
	[0091.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34
	[0091.317] SetThreadPriority (hThread=0xd34, nPriority=15) returned 1
	[0091.319] malloc (_Size=0x1000) returned 0x3286890
	[0091.319] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg") returned 68
	[0091.319] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.319] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", _SubStr="wasse") returned 0x0
	[0091.319] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", _SubStr="passw") returned 0x0
	[0091.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c
	[0091.323] SetThreadPriority (hThread=0xd3c, nPriority=15) returned 1
	[0091.487] malloc (_Size=0x1000) returned 0x32888a0
	[0091.487] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg") returned 68
	[0091.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", _SubStr="wasse") returned 0x0
	[0091.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", _SubStr="passw") returned 0x0
	[0091.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24
	[0091.488] SetThreadPriority (hThread=0xd24, nPriority=15) returned 1
	[0091.493] malloc (_Size=0x1000) returned 0x3285888
	[0091.493] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg") returned 68
	[0091.493] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.493] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", _SubStr="wasse") returned 0x0
	[0091.493] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", _SubStr="passw") returned 0x0
	[0091.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c
	[0091.494] SetThreadPriority (hThread=0xd1c, nPriority=15) returned 1
	[0091.500] malloc (_Size=0x1000) returned 0x3286890
	[0091.500] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg") returned 68
	[0091.500] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.501] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", _SubStr="wasse") returned 0x0
	[0091.501] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", _SubStr="passw") returned 0x0
	[0091.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c
	[0091.503] SetThreadPriority (hThread=0xd0c, nPriority=15) returned 1
	[0091.505] malloc (_Size=0x1000) returned 0x3287898
	[0091.505] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg") returned 68
	[0091.505] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.505] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", _SubStr="wasse") returned 0x0
	[0091.505] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", _SubStr="passw") returned 0x0
	[0091.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14
	[0091.557] SetThreadPriority (hThread=0xd14, nPriority=15) returned 1
	[0091.558] malloc (_Size=0x1000) returned 0x3286890
	[0091.559] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg") returned 68
	[0091.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", _SubStr="wasse") returned 0x0
	[0091.560] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", _SubStr="passw") returned 0x0
	[0091.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc
	[0091.565] SetThreadPriority (hThread=0xcfc, nPriority=15) returned 1
	[0091.589] malloc (_Size=0x1000) returned 0x32888a0
	[0091.589] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg") returned 68
	[0091.589] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", _SubStr="wasse") returned 0x0
	[0091.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", _SubStr="passw") returned 0x0
	[0091.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4
	[0091.591] SetThreadPriority (hThread=0xcf4, nPriority=15) returned 1
	[0091.592] malloc (_Size=0x1000) returned 0x32898a8
	[0091.593] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg") returned 68
	[0091.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", _SubStr="wasse") returned 0x0
	[0091.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", _SubStr="passw") returned 0x0
	[0091.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04
	[0091.599] SetThreadPriority (hThread=0xd04, nPriority=15) returned 1
	[0091.616] malloc (_Size=0x1000) returned 0x328c8c0
	[0091.616] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg") returned 68
	[0091.616] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.616] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", _SubStr="wasse") returned 0x0
	[0091.616] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", _SubStr="passw") returned 0x0
	[0091.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4
	[0091.617] SetThreadPriority (hThread=0xce4, nPriority=15) returned 1
	[0091.619] malloc (_Size=0x1000) returned 0x32888a0
	[0091.619] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg") returned 68
	[0091.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", _SubStr="wasse") returned 0x0
	[0091.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", _SubStr="passw") returned 0x0
	[0091.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc
	[0091.621] SetThreadPriority (hThread=0xcdc, nPriority=15) returned 1
	[0091.623] malloc (_Size=0x1000) returned 0x32898a8
	[0091.630] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg") returned 68
	[0091.630] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.630] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", _SubStr="wasse") returned 0x0
	[0091.631] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", _SubStr="passw") returned 0x0
	[0091.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec
	[0091.632] SetThreadPriority (hThread=0xcec, nPriority=15) returned 1
	[0091.634] malloc (_Size=0x1000) returned 0x328c8c0
	[0091.634] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg") returned 68
	[0091.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", _SubStr="wasse") returned 0x0
	[0091.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", _SubStr="passw") returned 0x0
	[0091.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4
	[0091.639] SetThreadPriority (hThread=0xcd4, nPriority=15) returned 1
	[0091.646] malloc (_Size=0x1000) returned 0x3286890
	[0091.646] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg") returned 68
	[0091.646] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.648] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", _SubStr="wasse") returned 0x0
	[0091.648] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", _SubStr="passw") returned 0x0
	[0091.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc
	[0091.649] SetThreadPriority (hThread=0xccc, nPriority=15) returned 1
	[0091.650] malloc (_Size=0x1000) returned 0x32888a0
	[0091.650] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg") returned 68
	[0091.653] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.653] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", _SubStr="wasse") returned 0x0
	[0091.653] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", _SubStr="passw") returned 0x0
	[0091.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4
	[0091.653] SetThreadPriority (hThread=0xcc4, nPriority=15) returned 1
	[0091.664] malloc (_Size=0x1000) returned 0x32898a8
	[0091.664] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg") returned 68
	[0091.664] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", _SubStr="CoronaVirus") returned 0x0
	[0091.664] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", _SubStr="wasse") returned 0x0
	[0091.664] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", _SubStr="passw") returned 0x0
	[0091.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc
	[0091.763] SetThreadPriority (hThread=0xcbc, nPriority=15) returned 1
	[0091.765] malloc (_Size=0x1000) returned 0x3286890
	[0091.765] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif") returned 68
	[0091.765] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.765] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", _SubStr="wasse") returned 0x0
	[0091.765] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", _SubStr="passw") returned 0x0
	[0091.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0
	[0091.771] SetThreadPriority (hThread=0xdb0, nPriority=15) returned 1
	[0091.784] malloc (_Size=0x1000) returned 0x3285888
	[0091.789] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif") returned 68
	[0091.789] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.789] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", _SubStr="wasse") returned 0x0
	[0091.789] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", _SubStr="passw") returned 0x0
	[0091.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4
	[0091.789] SetThreadPriority (hThread=0xdb4, nPriority=15) returned 1
	[0091.791] malloc (_Size=0x1000) returned 0x32888a0
	[0091.791] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif") returned 68
	[0091.791] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.791] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", _SubStr="wasse") returned 0x0
	[0091.791] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", _SubStr="passw") returned 0x0
	[0091.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4
	[0091.844] SetThreadPriority (hThread=0xcb4, nPriority=15) returned 1
	[0091.846] malloc (_Size=0x1000) returned 0x3285888
	[0091.846] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif") returned 68
	[0091.846] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.846] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", _SubStr="wasse") returned 0x0
	[0091.846] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", _SubStr="passw") returned 0x0
	[0091.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c
	[0091.852] SetThreadPriority (hThread=0xd2c, nPriority=15) returned 1
	[0091.861] malloc (_Size=0x1000) returned 0x3286890
	[0091.861] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif") returned 68
	[0091.861] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.861] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", _SubStr="wasse") returned 0x0
	[0091.861] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", _SubStr="passw") returned 0x0
	[0091.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0
	[0091.862] SetThreadPriority (hThread=0xdc0, nPriority=15) returned 1
	[0091.874] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.874] wcsstr (_Str=".bak", _SubStr=".gif") returned 0x0
	[0091.874] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.874] wcsstr (_Str=".bat", _SubStr=".gif") returned 0x0
	[0091.874] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".doc", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".jpg", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".jpe", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".txt", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".tex", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".dbf", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".xls", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".cry", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".xml", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".vsd", _SubStr=".gif") returned 0x0
	[0091.876] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.876] wcsstr (_Str=".pdf", _SubStr=".gif") returned 0x0
	[0091.877] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.877] wcsstr (_Str=".csv", _SubStr=".gif") returned 0x0
	[0091.877] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.877] wcsstr (_Str=".bmp", _SubStr=".gif") returned 0x0
	[0091.877] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.877] wcsstr (_Str=".tif", _SubStr=".gif") returned 0x0
	[0091.877] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.877] wcsstr (_Str=".1cd", _SubStr=".gif") returned 0x0
	[0091.877] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.877] wcsstr (_Str=".tax", _SubStr=".gif") returned 0x0
	[0091.877] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.877] wcsstr (_Str=".gif", _SubStr=".gif") returned=".gif"
	[0091.877] malloc (_Size=0x1000) returned 0x3286890
	[0091.877] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif") returned 68
	[0091.877] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.877] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", _SubStr="wasse") returned 0x0
	[0091.877] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", _SubStr="passw") returned 0x0
	[0091.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8
	[0091.877] SetThreadPriority (hThread=0xdb8, nPriority=15) returned 1
	[0091.879] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.879] wcsstr (_Str=".bak", _SubStr=".gif") returned 0x0
	[0091.879] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.879] wcsstr (_Str=".bat", _SubStr=".gif") returned 0x0
	[0091.879] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.879] wcsstr (_Str=".doc", _SubStr=".gif") returned 0x0
	[0091.879] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.879] wcsstr (_Str=".jpg", _SubStr=".gif") returned 0x0
	[0091.882] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.882] wcsstr (_Str=".jpe", _SubStr=".gif") returned 0x0
	[0091.882] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.882] wcsstr (_Str=".txt", _SubStr=".gif") returned 0x0
	[0091.882] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.882] wcsstr (_Str=".tex", _SubStr=".gif") returned 0x0
	[0091.882] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.882] wcsstr (_Str=".dbf", _SubStr=".gif") returned 0x0
	[0091.882] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.882] wcsstr (_Str=".xls", _SubStr=".gif") returned 0x0
	[0091.882] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.883] wcsstr (_Str=".cry", _SubStr=".gif") returned 0x0
	[0091.883] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.883] wcsstr (_Str=".xml", _SubStr=".gif") returned 0x0
	[0091.883] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.883] wcsstr (_Str=".vsd", _SubStr=".gif") returned 0x0
	[0091.883] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.883] wcsstr (_Str=".pdf", _SubStr=".gif") returned 0x0
	[0091.884] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.884] wcsstr (_Str=".csv", _SubStr=".gif") returned 0x0
	[0091.884] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.884] wcsstr (_Str=".bmp", _SubStr=".gif") returned 0x0
	[0091.884] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.884] wcsstr (_Str=".tif", _SubStr=".gif") returned 0x0
	[0091.884] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.886] wcsstr (_Str=".1cd", _SubStr=".gif") returned 0x0
	[0091.886] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.886] wcsstr (_Str=".tax", _SubStr=".gif") returned 0x0
	[0091.886] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.886] wcsstr (_Str=".gif", _SubStr=".gif") returned=".gif"
	[0091.886] malloc (_Size=0x1000) returned 0x3285888
	[0091.886] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif") returned 68
	[0091.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", _SubStr="wasse") returned 0x0
	[0091.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", _SubStr="passw") returned 0x0
	[0091.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc
	[0091.886] SetThreadPriority (hThread=0xdbc, nPriority=15) returned 1
	[0091.888] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.888] wcsstr (_Str=".bak", _SubStr=".gif") returned 0x0
	[0091.888] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.888] wcsstr (_Str=".bat", _SubStr=".gif") returned 0x0
	[0091.888] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".doc", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".jpg", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".jpe", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".txt", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".tex", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".dbf", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".xls", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.890] wcsstr (_Str=".cry", _SubStr=".gif") returned 0x0
	[0091.890] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.891] wcsstr (_Str=".xml", _SubStr=".gif") returned 0x0
	[0091.891] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0091.891] wcsstr (_Str=".vsd", _SubStr=".gif") returned 0x0
	[0091.891] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.296] wcsstr (_Str=".pdf", _SubStr=".gif") returned 0x0
	[0092.296] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.296] wcsstr (_Str=".csv", _SubStr=".gif") returned 0x0
	[0092.296] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.296] wcsstr (_Str=".bmp", _SubStr=".gif") returned 0x0
	[0092.296] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.296] wcsstr (_Str=".tif", _SubStr=".gif") returned 0x0
	[0092.296] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.296] wcsstr (_Str=".1cd", _SubStr=".gif") returned 0x0
	[0092.296] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.296] wcsstr (_Str=".tax", _SubStr=".gif") returned 0x0
	[0092.296] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.296] wcsstr (_Str=".gif", _SubStr=".gif") returned=".gif"
	[0092.296] malloc (_Size=0x1000) returned 0x3286890
	[0092.296] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif") returned 68
	[0092.296] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.296] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", _SubStr="wasse") returned 0x0
	[0092.296] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", _SubStr="passw") returned 0x0
	[0092.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4
	[0092.297] SetThreadPriority (hThread=0xdc4, nPriority=15) returned 1
	[0092.300] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.300] wcsstr (_Str=".bak", _SubStr=".gif") returned 0x0
	[0092.300] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.300] wcsstr (_Str=".bat", _SubStr=".gif") returned 0x0
	[0092.300] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.300] wcsstr (_Str=".doc", _SubStr=".gif") returned 0x0
	[0092.300] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.301] wcsstr (_Str=".jpg", _SubStr=".gif") returned 0x0
	[0092.301] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.301] wcsstr (_Str=".jpe", _SubStr=".gif") returned 0x0
	[0092.301] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.301] wcsstr (_Str=".txt", _SubStr=".gif") returned 0x0
	[0092.301] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.301] wcsstr (_Str=".tex", _SubStr=".gif") returned 0x0
	[0092.306] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.306] wcsstr (_Str=".dbf", _SubStr=".gif") returned 0x0
	[0092.306] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.307] wcsstr (_Str=".xls", _SubStr=".gif") returned 0x0
	[0092.308] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.308] wcsstr (_Str=".cry", _SubStr=".gif") returned 0x0
	[0092.308] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.308] wcsstr (_Str=".xml", _SubStr=".gif") returned 0x0
	[0092.308] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.308] wcsstr (_Str=".vsd", _SubStr=".gif") returned 0x0
	[0092.308] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.309] wcsstr (_Str=".pdf", _SubStr=".gif") returned 0x0
	[0092.309] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.309] wcsstr (_Str=".csv", _SubStr=".gif") returned 0x0
	[0092.309] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.309] wcsstr (_Str=".bmp", _SubStr=".gif") returned 0x0
	[0092.309] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.309] wcsstr (_Str=".tif", _SubStr=".gif") returned 0x0
	[0092.309] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.309] wcsstr (_Str=".1cd", _SubStr=".gif") returned 0x0
	[0092.309] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.309] wcsstr (_Str=".tax", _SubStr=".gif") returned 0x0
	[0092.309] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.309] wcsstr (_Str=".gif", _SubStr=".gif") returned=".gif"
	[0092.309] malloc (_Size=0x1000) returned 0x32898a8
	[0092.309] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif") returned 68
	[0092.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", _SubStr="wasse") returned 0x0
	[0092.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", _SubStr="passw") returned 0x0
	[0092.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4
	[0092.355] SetThreadPriority (hThread=0x2b4, nPriority=15) returned 1
	[0092.357] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.357] wcsstr (_Str=".bak", _SubStr=".gif") returned 0x0
	[0092.357] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.357] wcsstr (_Str=".bat", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".doc", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".jpg", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".jpe", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".txt", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".tex", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".dbf", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".xls", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".cry", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".xml", _SubStr=".gif") returned 0x0
	[0092.361] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.361] wcsstr (_Str=".vsd", _SubStr=".gif") returned 0x0
	[0092.362] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.362] wcsstr (_Str=".pdf", _SubStr=".gif") returned 0x0
	[0092.364] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.364] wcsstr (_Str=".csv", _SubStr=".gif") returned 0x0
	[0092.364] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.364] wcsstr (_Str=".bmp", _SubStr=".gif") returned 0x0
	[0092.364] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.364] wcsstr (_Str=".tif", _SubStr=".gif") returned 0x0
	[0092.364] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.364] wcsstr (_Str=".1cd", _SubStr=".gif") returned 0x0
	[0092.364] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.364] wcsstr (_Str=".tax", _SubStr=".gif") returned 0x0
	[0092.364] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.364] wcsstr (_Str=".gif", _SubStr=".gif") returned=".gif"
	[0092.364] malloc (_Size=0x1000) returned 0x3286890
	[0092.364] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif") returned 68
	[0092.364] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.364] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", _SubStr="wasse") returned 0x0
	[0092.364] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", _SubStr="passw") returned 0x0
	[0092.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0
	[0092.365] SetThreadPriority (hThread=0xdd0, nPriority=15) returned 1
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".bak", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".bat", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".doc", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".jpg", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".jpe", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".txt", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".tex", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".dbf", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".xls", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".cry", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".xml", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".vsd", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".pdf", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".csv", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.367] wcsstr (_Str=".bmp", _SubStr=".gif") returned 0x0
	[0092.367] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.368] wcsstr (_Str=".tif", _SubStr=".gif") returned 0x0
	[0092.368] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.368] wcsstr (_Str=".1cd", _SubStr=".gif") returned 0x0
	[0092.368] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.368] wcsstr (_Str=".tax", _SubStr=".gif") returned 0x0
	[0092.368] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.368] wcsstr (_Str=".gif", _SubStr=".gif") returned=".gif"
	[0092.368] malloc (_Size=0x1000) returned 0x3285888
	[0092.368] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif") returned 68
	[0092.368] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.368] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", _SubStr="wasse") returned 0x0
	[0092.368] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", _SubStr="passw") returned 0x0
	[0092.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc
	[0092.368] SetThreadPriority (hThread=0xddc, nPriority=15) returned 1
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".bak", _SubStr=".gif") returned 0x0
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".bat", _SubStr=".gif") returned 0x0
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".doc", _SubStr=".gif") returned 0x0
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".jpg", _SubStr=".gif") returned 0x0
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".jpe", _SubStr=".gif") returned 0x0
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".txt", _SubStr=".gif") returned 0x0
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".tex", _SubStr=".gif") returned 0x0
	[0092.371] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.371] wcsstr (_Str=".dbf", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".xls", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".cry", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".xml", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".vsd", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".pdf", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".csv", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".bmp", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".tif", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".1cd", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".tax", _SubStr=".gif") returned 0x0
	[0092.372] _wcslwr (in: _String=0x315b114 | out: _String=".gif") returned=".gif"
	[0092.372] wcsstr (_Str=".gif", _SubStr=".gif") returned=".gif"
	[0092.372] malloc (_Size=0x1000) returned 0x328e8d0
	[0092.372] _swprintf (in: param_1=0x328e8d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif") returned 68
	[0092.372] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.372] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", _SubStr="wasse") returned 0x0
	[0092.372] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", _SubStr="passw") returned 0x0
	[0092.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328e8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4
	[0092.439] SetThreadPriority (hThread=0xdd4, nPriority=15) returned 1
	[0092.442] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.442] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0092.442] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.443] wcsstr (_Str=".bat", _SubStr=".wmf") returned 0x0
	[0092.443] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.443] wcsstr (_Str=".doc", _SubStr=".wmf") returned 0x0
	[0092.443] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.443] wcsstr (_Str=".jpg", _SubStr=".wmf") returned 0x0
	[0092.443] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.443] wcsstr (_Str=".jpe", _SubStr=".wmf") returned 0x0
	[0092.445] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.445] wcsstr (_Str=".txt", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".tex", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".dbf", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".xls", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".cry", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".xml", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".vsd", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".pdf", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".csv", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".bmp", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".tif", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".1cd", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".tax", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".gif", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".gbr", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".png", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".mdb", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".mdf", _SubStr=".wmf") returned 0x0
	[0092.446] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.446] wcsstr (_Str=".sdf", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".dwg", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".dxf", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".dgn", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".stl", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".gho", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".v2i", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".3ds", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".ppt", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".acc", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".vpd", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".odt", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".ods", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".rar", _SubStr=".wmf") returned 0x0
	[0092.447] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.447] wcsstr (_Str=".zip", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".cpp", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".pas", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".asm", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".rtf", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".lic", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".avi", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".mov", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".mp3", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".vbs", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".v8i", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".erf", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".epf", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".mxl", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".cfu", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".mht", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0092.448] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.448] wcsstr (_Str=".old", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".bat", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".doc", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".jpg", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".jpe", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".txt", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".tex", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".dbf", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".xls", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".cry", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".xml", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".vsd", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".pdf", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".csv", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".bmp", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".tif", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".1cd", _SubStr=".wmf") returned 0x0
	[0092.449] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.449] wcsstr (_Str=".tax", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".gif", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".gbr", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".png", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".mdb", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".mdf", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".sdf", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".dwg", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".dxf", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".dgn", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".stl", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".gho", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".v2i", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".3ds", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".ppt", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".acc", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".vpd", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.450] wcsstr (_Str=".odt", _SubStr=".wmf") returned 0x0
	[0092.450] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".ods", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".rar", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".zip", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".cpp", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".pas", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".asm", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".rtf", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".lic", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".avi", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".mov", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".mp3", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".vbs", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".v8i", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".erf", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".epf", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".mxl", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".cfu", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.451] wcsstr (_Str=".mht", _SubStr=".wmf") returned 0x0
	[0092.451] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.452] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0092.452] _wcslwr (in: _String=0x315b114 | out: _String=".wmf") returned=".wmf"
	[0092.452] wcsstr (_Str=".old", _SubStr=".wmf") returned 0x0
	[0092.452] _wcslwr (in: _String=0x315b114 | out: _String=".bmp") returned=".bmp"
	[0092.452] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0092.452] _wcslwr (in: _String=0x315b114 | out: _String=".bmp") returned=".bmp"
	[0092.452] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0092.452] _wcslwr (in: _String=0x315b114 | out: _String=".bmp") returned=".bmp"
	[0092.452] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0092.452] _wcslwr (in: _String=0x315b114 | out: _String=".bmp") returned=".bmp"
	[0092.452] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0092.452] _wcslwr (in: _String=0x315b114 | out: _String=".bmp") returned=".bmp"
	[0092.452] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0092.452] _wcslwr (in: _String=0x315b114 | out: _String=".bmp") returned=".bmp"
	[0092.452] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0092.452] malloc (_Size=0x1000) returned 0x328c8c0
	[0092.452] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp") returned 68
	[0092.452] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.452] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", _SubStr="wasse") returned 0x0
	[0092.452] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", _SubStr="passw") returned 0x0
	[0092.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0
	[0092.453] SetThreadPriority (hThread=0xde0, nPriority=15) returned 1
	[0092.455] malloc (_Size=0x1000) returned 0x3285888
	[0092.455] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp") returned 68
	[0092.455] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.455] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", _SubStr="wasse") returned 0x0
	[0092.455] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", _SubStr="passw") returned 0x0
	[0092.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8
	[0092.472] SetThreadPriority (hThread=0xde8, nPriority=15) returned 1
	[0092.485] malloc (_Size=0x1000) returned 0x3287898
	[0092.487] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp") returned 68
	[0092.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", _SubStr="wasse") returned 0x0
	[0092.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", _SubStr="passw") returned 0x0
	[0092.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4
	[0092.488] SetThreadPriority (hThread=0xde4, nPriority=15) returned 1
	[0092.489] malloc (_Size=0x1000) returned 0x32888a0
	[0092.489] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp") returned 68
	[0092.490] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.490] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", _SubStr="wasse") returned 0x0
	[0092.490] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", _SubStr="passw") returned 0x0
	[0092.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8
	[0092.497] SetThreadPriority (hThread=0xdd8, nPriority=15) returned 1
	[0092.508] malloc (_Size=0x1000) returned 0x3287898
	[0092.508] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp") returned 68
	[0092.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", _SubStr="wasse") returned 0x0
	[0092.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", _SubStr="passw") returned 0x0
	[0092.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4
	[0092.509] SetThreadPriority (hThread=0xdf4, nPriority=15) returned 1
	[0092.511] malloc (_Size=0x1000) returned 0x328c8c0
	[0092.511] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp") returned 68
	[0092.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", _SubStr="wasse") returned 0x0
	[0092.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", _SubStr="passw") returned 0x0
	[0092.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec
	[0092.621] SetThreadPriority (hThread=0xdec, nPriority=15) returned 1
	[0092.623] malloc (_Size=0x1000) returned 0x3285888
	[0092.623] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp") returned 68
	[0092.623] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.623] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", _SubStr="wasse") returned 0x0
	[0092.623] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", _SubStr="passw") returned 0x0
	[0092.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8
	[0092.676] SetThreadPriority (hThread=0xdf8, nPriority=15) returned 1
	[0092.678] malloc (_Size=0x1000) returned 0x328c8c0
	[0092.678] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp") returned 68
	[0092.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", _SubStr="wasse") returned 0x0
	[0092.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", _SubStr="passw") returned 0x0
	[0092.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc
	[0092.685] SetThreadPriority (hThread=0xdfc, nPriority=15) returned 1
	[0092.746] malloc (_Size=0x1000) returned 0x3287898
	[0092.746] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp") returned 68
	[0092.746] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.746] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", _SubStr="wasse") returned 0x0
	[0092.746] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", _SubStr="passw") returned 0x0
	[0092.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00
	[0092.746] SetThreadPriority (hThread=0xe00, nPriority=15) returned 1
	[0092.749] malloc (_Size=0x1000) returned 0x328c8c0
	[0092.749] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp") returned 68
	[0092.749] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.749] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", _SubStr="wasse") returned 0x0
	[0092.749] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", _SubStr="passw") returned 0x0
	[0092.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0
	[0092.807] SetThreadPriority (hThread=0xdf0, nPriority=15) returned 1
	[0092.809] malloc (_Size=0x1000) returned 0x3285888
	[0092.809] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp") returned 68
	[0092.809] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.810] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", _SubStr="wasse") returned 0x0
	[0092.810] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", _SubStr="passw") returned 0x0
	[0092.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04
	[0092.870] SetThreadPriority (hThread=0xe04, nPriority=15) returned 1
	[0092.872] malloc (_Size=0x1000) returned 0x328c8c0
	[0092.872] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp") returned 68
	[0092.872] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", _SubStr="CoronaVirus") returned 0x0
	[0092.872] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", _SubStr="wasse") returned 0x0
	[0092.872] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", _SubStr="passw") returned 0x0
	[0092.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c
	[0092.880] SetThreadPriority (hThread=0xe0c, nPriority=15) returned 1
	[0092.898] malloc (_Size=0x1000) returned 0x328c8c0
	[0092.898] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg") returned 68
	[0092.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", _SubStr="CoronaVirus") returned 0x0
	[0092.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", _SubStr="wasse") returned 0x0
	[0092.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", _SubStr="passw") returned 0x0
	[0092.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10
	[0092.898] SetThreadPriority (hThread=0xe10, nPriority=15) returned 1
	[0093.307] malloc (_Size=0x1000) returned 0x3286890
	[0093.307] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg") returned 68
	[0093.307] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.307] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", _SubStr="wasse") returned 0x0
	[0093.307] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", _SubStr="passw") returned 0x0
	[0093.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08
	[0093.308] SetThreadPriority (hThread=0xe08, nPriority=15) returned 1
	[0093.311] malloc (_Size=0x1000) returned 0x32888a0
	[0093.311] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg") returned 68
	[0093.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", _SubStr="wasse") returned 0x0
	[0093.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", _SubStr="passw") returned 0x0
	[0093.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18
	[0093.320] SetThreadPriority (hThread=0xe18, nPriority=15) returned 1
	[0093.335] malloc (_Size=0x1000) returned 0x328c8c0
	[0093.335] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg") returned 68
	[0093.335] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.335] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", _SubStr="wasse") returned 0x0
	[0093.335] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", _SubStr="passw") returned 0x0
	[0093.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c
	[0093.338] SetThreadPriority (hThread=0xe1c, nPriority=15) returned 1
	[0093.340] malloc (_Size=0x1000) returned 0x32898a8
	[0093.340] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg") returned 68
	[0093.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", _SubStr="wasse") returned 0x0
	[0093.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", _SubStr="passw") returned 0x0
	[0093.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24
	[0093.346] SetThreadPriority (hThread=0xe24, nPriority=15) returned 1
	[0093.360] malloc (_Size=0x1000) returned 0x328c8c0
	[0093.362] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg") returned 68
	[0093.362] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.362] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", _SubStr="wasse") returned 0x0
	[0093.362] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", _SubStr="passw") returned 0x0
	[0093.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14
	[0093.363] SetThreadPriority (hThread=0xe14, nPriority=15) returned 1
	[0093.368] malloc (_Size=0x1000) returned 0x32888a0
	[0093.368] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg") returned 68
	[0093.368] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.368] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", _SubStr="wasse") returned 0x0
	[0093.368] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", _SubStr="passw") returned 0x0
	[0093.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20
	[0093.516] SetThreadPriority (hThread=0xe20, nPriority=15) returned 1
	[0093.593] malloc (_Size=0x1000) returned 0x328c8c0
	[0093.593] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg") returned 68
	[0093.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", _SubStr="wasse") returned 0x0
	[0093.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", _SubStr="passw") returned 0x0
	[0093.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28
	[0093.593] SetThreadPriority (hThread=0xe28, nPriority=15) returned 1
	[0093.608] malloc (_Size=0x1000) returned 0x3285888
	[0093.608] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg") returned 68
	[0093.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", _SubStr="wasse") returned 0x0
	[0093.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", _SubStr="passw") returned 0x0
	[0093.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c
	[0093.609] SetThreadPriority (hThread=0xe2c, nPriority=15) returned 1
	[0093.611] malloc (_Size=0x1000) returned 0x32898a8
	[0093.611] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg") returned 68
	[0093.612] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.612] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", _SubStr="wasse") returned 0x0
	[0093.612] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", _SubStr="passw") returned 0x0
	[0093.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30
	[0093.683] SetThreadPriority (hThread=0xe30, nPriority=15) returned 1
	[0093.684] malloc (_Size=0x1000) returned 0x328c8c0
	[0093.685] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg") returned 68
	[0093.685] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.685] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", _SubStr="wasse") returned 0x0
	[0093.685] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", _SubStr="passw") returned 0x0
	[0093.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34
	[0093.745] SetThreadPriority (hThread=0xe34, nPriority=15) returned 1
	[0093.746] malloc (_Size=0x1000) returned 0x3286890
	[0093.748] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg") returned 68
	[0093.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", _SubStr="wasse") returned 0x0
	[0093.748] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", _SubStr="passw") returned 0x0
	[0093.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c
	[0093.755] SetThreadPriority (hThread=0xe3c, nPriority=15) returned 1
	[0093.769] malloc (_Size=0x1000) returned 0x328c8c0
	[0093.769] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg") returned 68
	[0093.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", _SubStr="wasse") returned 0x0
	[0093.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", _SubStr="passw") returned 0x0
	[0093.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40
	[0093.823] SetThreadPriority (hThread=0xe40, nPriority=15) returned 1
	[0093.824] malloc (_Size=0x1000) returned 0x32888a0
	[0093.826] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg") returned 68
	[0093.826] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.826] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", _SubStr="wasse") returned 0x0
	[0093.826] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", _SubStr="passw") returned 0x0
	[0093.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38
	[0093.835] SetThreadPriority (hThread=0xe38, nPriority=15) returned 1
	[0093.850] malloc (_Size=0x1000) returned 0x3287898
	[0093.850] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg") returned 68
	[0093.850] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", _SubStr="CoronaVirus") returned 0x0
	[0093.850] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", _SubStr="wasse") returned 0x0
	[0093.851] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", _SubStr="passw") returned 0x0
	[0093.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48
	[0094.043] SetThreadPriority (hThread=0xe48, nPriority=15) returned 1
	[0094.046] malloc (_Size=0x1000) returned 0x32898a8
	[0094.046] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg") returned 68
	[0094.046] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.046] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", _SubStr="wasse") returned 0x0
	[0094.046] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", _SubStr="passw") returned 0x0
	[0094.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50
	[0094.052] SetThreadPriority (hThread=0xe50, nPriority=15) returned 1
	[0094.073] malloc (_Size=0x1000) returned 0x328c8c0
	[0094.073] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg") returned 68
	[0094.073] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", _SubStr="wasse") returned 0x0
	[0094.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", _SubStr="passw") returned 0x0
	[0094.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44
	[0094.417] SetThreadPriority (hThread=0xe44, nPriority=15) returned 1
	[0094.424] malloc (_Size=0x1000) returned 0x3286890
	[0094.425] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg") returned 68
	[0094.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", _SubStr="wasse") returned 0x0
	[0094.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", _SubStr="passw") returned 0x0
	[0094.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54
	[0094.509] SetThreadPriority (hThread=0xe54, nPriority=15) returned 1
	[0094.528] malloc (_Size=0x1000) returned 0x328c8c0
	[0094.528] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg") returned 68
	[0094.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", _SubStr="wasse") returned 0x0
	[0094.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", _SubStr="passw") returned 0x0
	[0094.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c
	[0094.529] SetThreadPriority (hThread=0xe4c, nPriority=15) returned 1
	[0094.530] malloc (_Size=0x1000) returned 0x3285888
	[0094.531] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg") returned 68
	[0094.531] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.531] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", _SubStr="wasse") returned 0x0
	[0094.531] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", _SubStr="passw") returned 0x0
	[0094.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60
	[0094.537] SetThreadPriority (hThread=0xe60, nPriority=15) returned 1
	[0094.558] malloc (_Size=0x1000) returned 0x3287898
	[0094.558] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg") returned 68
	[0094.558] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.558] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", _SubStr="wasse") returned 0x0
	[0094.558] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", _SubStr="passw") returned 0x0
	[0094.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c
	[0094.558] SetThreadPriority (hThread=0xe5c, nPriority=15) returned 1
	[0094.560] malloc (_Size=0x1000) returned 0x3285888
	[0094.560] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg") returned 68
	[0094.560] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.560] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", _SubStr="wasse") returned 0x0
	[0094.560] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", _SubStr="passw") returned 0x0
	[0094.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68
	[0094.570] SetThreadPriority (hThread=0xe68, nPriority=15) returned 1
	[0094.578] malloc (_Size=0x1000) returned 0x328c8c0
	[0094.578] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg") returned 68
	[0094.579] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", _SubStr="CoronaVirus") returned 0x0
	[0094.579] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", _SubStr="wasse") returned 0x0
	[0094.579] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", _SubStr="passw") returned 0x0
	[0094.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64
	[0095.262] SetThreadPriority (hThread=0xe64, nPriority=15) returned 1
	[0095.265] malloc (_Size=0x1000) returned 0x3285888
	[0095.265] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg") returned 68
	[0095.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", _SubStr="wasse") returned 0x0
	[0095.266] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", _SubStr="passw") returned 0x0
	[0095.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70
	[0095.281] SetThreadPriority (hThread=0xe70, nPriority=15) returned 1
	[0095.282] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.282] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg") returned 68
	[0095.282] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", _SubStr="wasse") returned 0x0
	[0095.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", _SubStr="passw") returned 0x0
	[0095.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74
	[0095.300] SetThreadPriority (hThread=0xe74, nPriority=15) returned 1
	[0095.311] malloc (_Size=0x1000) returned 0x32898a8
	[0095.311] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg") returned 68
	[0095.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", _SubStr="wasse") returned 0x0
	[0095.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", _SubStr="passw") returned 0x0
	[0095.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c
	[0095.314] SetThreadPriority (hThread=0xe6c, nPriority=15) returned 1
	[0095.316] malloc (_Size=0x1000) returned 0x3287898
	[0095.316] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg") returned 68
	[0095.317] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.317] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", _SubStr="wasse") returned 0x0
	[0095.317] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", _SubStr="passw") returned 0x0
	[0095.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58
	[0095.431] SetThreadPriority (hThread=0xe58, nPriority=15) returned 1
	[0095.443] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.443] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg") returned 68
	[0095.443] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.443] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", _SubStr="wasse") returned 0x0
	[0095.445] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", _SubStr="passw") returned 0x0
	[0095.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78
	[0095.445] SetThreadPriority (hThread=0xe78, nPriority=15) returned 1
	[0095.448] malloc (_Size=0x1000) returned 0x32898a8
	[0095.448] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg") returned 68
	[0095.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", _SubStr="wasse") returned 0x0
	[0095.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", _SubStr="passw") returned 0x0
	[0095.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80
	[0095.454] SetThreadPriority (hThread=0xe80, nPriority=15) returned 1
	[0095.456] malloc (_Size=0x1000) returned 0x3285888
	[0095.456] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg") returned 68
	[0095.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.456] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", _SubStr="wasse") returned 0x0
	[0095.457] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", _SubStr="passw") returned 0x0
	[0095.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c
	[0095.457] SetThreadPriority (hThread=0xe8c, nPriority=15) returned 1
	[0095.459] malloc (_Size=0x1000) returned 0x328d8c8
	[0095.459] _swprintf (in: param_1=0x328d8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg") returned 68
	[0095.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", _SubStr="wasse") returned 0x0
	[0095.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", _SubStr="passw") returned 0x0
	[0095.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98
	[0095.460] SetThreadPriority (hThread=0xe98, nPriority=15) returned 1
	[0095.463] malloc (_Size=0x1000) returned 0x3286890
	[0095.463] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg") returned 68
	[0095.463] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.463] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", _SubStr="wasse") returned 0x0
	[0095.463] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", _SubStr="passw") returned 0x0
	[0095.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4
	[0095.463] SetThreadPriority (hThread=0xea4, nPriority=15) returned 1
	[0095.464] malloc (_Size=0x1000) returned 0x3285888
	[0095.502] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg") returned 68
	[0095.502] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.502] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", _SubStr="wasse") returned 0x0
	[0095.502] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", _SubStr="passw") returned 0x0
	[0095.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c
	[0095.502] SetThreadPriority (hThread=0xe9c, nPriority=15) returned 1
	[0095.515] malloc (_Size=0x1000) returned 0x3287898
	[0095.515] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg") returned 68
	[0095.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", _SubStr="wasse") returned 0x0
	[0095.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", _SubStr="passw") returned 0x0
	[0095.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84
	[0095.516] SetThreadPriority (hThread=0xe84, nPriority=15) returned 1
	[0095.517] malloc (_Size=0x1000) returned 0x3286890
	[0095.521] _swprintf (in: param_1=0x3286890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg") returned 68
	[0095.521] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.521] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", _SubStr="wasse") returned 0x0
	[0095.521] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", _SubStr="passw") returned 0x0
	[0095.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3286890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90
	[0095.530] SetThreadPriority (hThread=0xe90, nPriority=15) returned 1
	[0095.534] malloc (_Size=0x1000) returned 0x32888a0
	[0095.534] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg") returned 68
	[0095.534] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.534] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", _SubStr="wasse") returned 0x0
	[0095.535] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", _SubStr="passw") returned 0x0
	[0095.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac
	[0095.541] SetThreadPriority (hThread=0xeac, nPriority=15) returned 1
	[0095.556] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.556] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg") returned 68
	[0095.556] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.556] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", _SubStr="wasse") returned 0x0
	[0095.556] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", _SubStr="passw") returned 0x0
	[0095.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0
	[0095.556] SetThreadPriority (hThread=0xea0, nPriority=15) returned 1
	[0095.558] malloc (_Size=0x1000) returned 0x32888a0
	[0095.559] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg") returned 68
	[0095.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", _SubStr="wasse") returned 0x0
	[0095.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", _SubStr="passw") returned 0x0
	[0095.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94
	[0095.567] SetThreadPriority (hThread=0xe94, nPriority=15) returned 1
	[0095.588] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.588] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg") returned 68
	[0095.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", _SubStr="wasse") returned 0x0
	[0095.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", _SubStr="passw") returned 0x0
	[0095.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88
	[0095.588] SetThreadPriority (hThread=0xe88, nPriority=15) returned 1
	[0095.591] malloc (_Size=0x1000) returned 0x32898a8
	[0095.591] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg") returned 68
	[0095.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", _SubStr="wasse") returned 0x0
	[0095.591] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", _SubStr="passw") returned 0x0
	[0095.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4
	[0095.600] SetThreadPriority (hThread=0xeb4, nPriority=15) returned 1
	[0095.609] malloc (_Size=0x1000) returned 0x3285888
	[0095.609] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg") returned 68
	[0095.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", _SubStr="wasse") returned 0x0
	[0095.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", _SubStr="passw") returned 0x0
	[0095.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8
	[0095.610] SetThreadPriority (hThread=0xeb8, nPriority=15) returned 1
	[0095.614] malloc (_Size=0x1000) returned 0x32888a0
	[0095.614] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg") returned 68
	[0095.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", _SubStr="wasse") returned 0x0
	[0095.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", _SubStr="passw") returned 0x0
	[0095.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c
	[0095.622] SetThreadPriority (hThread=0xe7c, nPriority=15) returned 1
	[0095.624] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.624] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg") returned 68
	[0095.624] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.624] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", _SubStr="wasse") returned 0x0
	[0095.624] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", _SubStr="passw") returned 0x0
	[0095.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc
	[0095.629] SetThreadPriority (hThread=0xebc, nPriority=15) returned 1
	[0095.640] malloc (_Size=0x1000) returned 0x3285888
	[0095.642] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg") returned 68
	[0095.642] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.642] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", _SubStr="wasse") returned 0x0
	[0095.642] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", _SubStr="passw") returned 0x0
	[0095.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0
	[0095.645] SetThreadPriority (hThread=0xec0, nPriority=15) returned 1
	[0095.654] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.654] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg") returned 68
	[0095.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", _SubStr="wasse") returned 0x0
	[0095.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", _SubStr="passw") returned 0x0
	[0095.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4
	[0095.654] SetThreadPriority (hThread=0xec4, nPriority=15) returned 1
	[0095.656] malloc (_Size=0x1000) returned 0x32888a0
	[0095.656] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg") returned 68
	[0095.656] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.656] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", _SubStr="wasse") returned 0x0
	[0095.656] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", _SubStr="passw") returned 0x0
	[0095.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8
	[0095.661] SetThreadPriority (hThread=0xec8, nPriority=15) returned 1
	[0095.670] malloc (_Size=0x1000) returned 0x3285888
	[0095.670] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg") returned 68
	[0095.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", _SubStr="wasse") returned 0x0
	[0095.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", _SubStr="passw") returned 0x0
	[0095.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0
	[0095.670] SetThreadPriority (hThread=0xed0, nPriority=15) returned 1
	[0095.683] malloc (_Size=0x1000) returned 0x328d8c8
	[0095.683] _swprintf (in: param_1=0x328d8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg") returned 68
	[0095.683] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.683] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", _SubStr="wasse") returned 0x0
	[0095.683] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", _SubStr="passw") returned 0x0
	[0095.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4
	[0095.683] SetThreadPriority (hThread=0xed4, nPriority=15) returned 1
	[0095.697] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.697] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg") returned 68
	[0095.697] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.697] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", _SubStr="wasse") returned 0x0
	[0095.697] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", _SubStr="passw") returned 0x0
	[0095.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc
	[0095.698] SetThreadPriority (hThread=0xecc, nPriority=15) returned 1
	[0095.700] malloc (_Size=0x1000) returned 0x3285888
	[0095.700] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg") returned 68
	[0095.700] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.700] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", _SubStr="wasse") returned 0x0
	[0095.700] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", _SubStr="passw") returned 0x0
	[0095.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x324
	[0095.860] SetThreadPriority (hThread=0x324, nPriority=15) returned 1
	[0095.881] malloc (_Size=0x1000) returned 0x32888a0
	[0095.881] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg") returned 68
	[0095.881] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.881] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", _SubStr="wasse") returned 0x0
	[0095.881] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", _SubStr="passw") returned 0x0
	[0095.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8
	[0095.881] SetThreadPriority (hThread=0xed8, nPriority=15) returned 1
	[0095.898] malloc (_Size=0x1000) returned 0x32898a8
	[0095.898] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg") returned 68
	[0095.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", _SubStr="wasse") returned 0x0
	[0095.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", _SubStr="passw") returned 0x0
	[0095.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0
	[0095.899] SetThreadPriority (hThread=0xeb0, nPriority=15) returned 1
	[0095.916] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.916] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg") returned 68
	[0095.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", _SubStr="wasse") returned 0x0
	[0095.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", _SubStr="passw") returned 0x0
	[0095.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc
	[0095.917] SetThreadPriority (hThread=0xedc, nPriority=15) returned 1
	[0095.919] malloc (_Size=0x1000) returned 0x3285888
	[0095.919] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg") returned 68
	[0095.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", _SubStr="wasse") returned 0x0
	[0095.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", _SubStr="passw") returned 0x0
	[0095.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4
	[0095.927] SetThreadPriority (hThread=0xee4, nPriority=15) returned 1
	[0095.943] malloc (_Size=0x1000) returned 0x32898a8
	[0095.943] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg") returned 68
	[0095.943] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.943] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", _SubStr="wasse") returned 0x0
	[0095.943] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", _SubStr="passw") returned 0x0
	[0095.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec
	[0095.944] SetThreadPriority (hThread=0xeec, nPriority=15) returned 1
	[0095.954] malloc (_Size=0x1000) returned 0x328c8c0
	[0095.954] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg") returned 68
	[0095.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", _SubStr="wasse") returned 0x0
	[0095.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", _SubStr="passw") returned 0x0
	[0095.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0
	[0095.955] SetThreadPriority (hThread=0xee0, nPriority=15) returned 1
	[0095.957] malloc (_Size=0x1000) returned 0x328d8c8
	[0095.957] _swprintf (in: param_1=0x328d8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg") returned 68
	[0095.957] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.957] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", _SubStr="wasse") returned 0x0
	[0095.957] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", _SubStr="passw") returned 0x0
	[0095.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8
	[0096.402] SetThreadPriority (hThread=0xea8, nPriority=15) returned 1
	[0096.405] malloc (_Size=0x1000) returned 0x328c8c0
	[0096.405] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg") returned 68
	[0096.405] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.405] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", _SubStr="wasse") returned 0x0
	[0096.405] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", _SubStr="passw") returned 0x0
	[0096.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x34c
	[0096.551] SetThreadPriority (hThread=0x34c, nPriority=15) returned 1
	[0096.562] malloc (_Size=0x1000) returned 0x3287898
	[0096.562] _swprintf (in: param_1=0x3287898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg") returned 68
	[0096.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", _SubStr="wasse") returned 0x0
	[0096.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", _SubStr="passw") returned 0x0
	[0096.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3287898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x340
	[0096.563] SetThreadPriority (hThread=0x340, nPriority=15) returned 1
	[0096.565] malloc (_Size=0x1000) returned 0x32898a8
	[0096.565] _swprintf (in: param_1=0x32898a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg") returned 68
	[0096.565] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.565] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", _SubStr="wasse") returned 0x0
	[0096.565] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", _SubStr="passw") returned 0x0
	[0096.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32898a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0
	[0096.569] SetThreadPriority (hThread=0xef0, nPriority=15) returned 1
	[0096.576] malloc (_Size=0x1000) returned 0x328c8c0
	[0096.576] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg") returned 68
	[0096.576] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.576] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", _SubStr="wasse") returned 0x0
	[0096.576] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", _SubStr="passw") returned 0x0
	[0096.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c
	[0096.632] SetThreadPriority (hThread=0x35c, nPriority=15) returned 1
	[0096.636] malloc (_Size=0x1000) returned 0x3285888
	[0096.636] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg") returned 68
	[0096.636] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", _SubStr="wasse") returned 0x0
	[0096.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", _SubStr="passw") returned 0x0
	[0096.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4
	[0096.640] SetThreadPriority (hThread=0xef4, nPriority=15) returned 1
	[0096.647] malloc (_Size=0x1000) returned 0x328c8c0
	[0096.647] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg") returned 68
	[0096.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", _SubStr="wasse") returned 0x0
	[0096.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", _SubStr="passw") returned 0x0
	[0096.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8
	[0096.702] SetThreadPriority (hThread=0xee8, nPriority=15) returned 1
	[0096.703] malloc (_Size=0x1000) returned 0x3285888
	[0096.704] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg") returned 68
	[0096.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", _SubStr="wasse") returned 0x0
	[0096.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", _SubStr="passw") returned 0x0
	[0096.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8
	[0096.817] SetThreadPriority (hThread=0xef8, nPriority=15) returned 1
	[0096.819] malloc (_Size=0x1000) returned 0x328c8c0
	[0096.819] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg") returned 68
	[0096.819] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.819] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", _SubStr="wasse") returned 0x0
	[0096.819] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", _SubStr="passw") returned 0x0
	[0096.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc
	[0096.827] SetThreadPriority (hThread=0xefc, nPriority=15) returned 1
	[0096.838] malloc (_Size=0x1000) returned 0x3285888
	[0096.838] _swprintf (in: param_1=0x3285888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg") returned 68
	[0096.838] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.838] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", _SubStr="wasse") returned 0x0
	[0096.838] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", _SubStr="passw") returned 0x0
	[0096.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x3285888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00
	[0096.841] SetThreadPriority (hThread=0xf00, nPriority=15) returned 1
	[0096.842] malloc (_Size=0x1000) returned 0x328d8c8
	[0096.842] _swprintf (in: param_1=0x328d8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg") returned 68
	[0096.842] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.842] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", _SubStr="wasse") returned 0x0
	[0096.842] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", _SubStr="passw") returned 0x0
	[0096.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08
	[0096.849] SetThreadPriority (hThread=0xf08, nPriority=15) returned 1
	[0096.862] malloc (_Size=0x1000) returned 0x32888a0
	[0096.862] _swprintf (in: param_1=0x32888a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg") returned 68
	[0096.862] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.862] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", _SubStr="wasse") returned 0x0
	[0096.862] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", _SubStr="passw") returned 0x0
	[0096.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x32888a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x32c
	[0096.863] SetThreadPriority (hThread=0x32c, nPriority=15) returned 1
	[0096.864] malloc (_Size=0x1000) returned 0x328c8c0
	[0096.867] _swprintf (in: param_1=0x328c8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg") returned 68
	[0096.867] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.867] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg", _SubStr="wasse") returned 0x0
	[0096.867] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg", _SubStr="passw") returned 0x0
	[0096.868] CreateThread (lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x328c8c0, dwCreationFlags=0x0, lpThreadId=0x0) 

Thread:
	id = 52
	os_tid = 0x13b8

	[0066.222] _alloca_probe () returned 0x40328a
	[0066.222] GetCurrentThreadId () returned 0x13b8
	[0066.222] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.224] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x418
	[0066.224] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=7567) returned 1
	[0066.224] CreateFileMappingA (hFile=0x418, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d9d, lpName=0x0) returned 0x41c
	[0066.224] MapViewOfFile (hFileMappingObject=0x41c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.226] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.226] CloseHandle (hObject=0x41c) returned 1
	[0066.226] GetCurrentThreadId () returned 0x13b8
	[0066.227] FlushFileBuffers (hFile=0x418) returned 1
	[0066.235] CloseHandle (hObject=0x418) returned 1
	[0066.237] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.237] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.238] free (_Block=0x210dcf8) 
	[0066.238] RtlExitUserThread (Status=0x0) 

Thread:
	id = 53
	os_tid = 0x1358

	[0066.233] _alloca_probe () returned 0x40328a
	[0066.233] GetCurrentThreadId () returned 0x1358
	[0066.233] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.234] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x420
	[0066.234] GetFileSizeEx (in: hFile=0x420, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=74214) returned 1
	[0066.234] CreateFileMappingA (hFile=0x420, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x121eb, lpName=0x0) returned 0x424
	[0066.235] MapViewOfFile (hFileMappingObject=0x424, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.252] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.252] CloseHandle (hObject=0x424) returned 1
	[0066.252] GetCurrentThreadId () returned 0x1358
	[0066.252] FlushFileBuffers (hFile=0x420) returned 1
	[0066.398] CloseHandle (hObject=0x420) returned 1
	[0066.400] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0066.400] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0066.401] free (_Block=0x31b0048) 
	[0066.401] RtlExitUserThread (Status=0x0) 

Thread:
	id = 55
	os_tid = 0x134c

	[0066.312] _alloca_probe () returned 0x40328a
	[0066.313] GetCurrentThreadId () returned 0x134c
	[0066.313] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.313] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240
	[0066.313] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=6309) returned 1
	[0066.313] CreateFileMappingA (hFile=0x240, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18a9, lpName=0x0) returned 0x2c0
	[0066.313] MapViewOfFile (hFileMappingObject=0x2c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.315] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.315] CloseHandle (hObject=0x2c0) returned 1
	[0066.315] GetCurrentThreadId () returned 0x134c
	[0066.315] FlushFileBuffers (hFile=0x240) returned 1
	[0066.318] CloseHandle (hObject=0x240) returned 1
	[0066.320] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.320] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.320] free (_Block=0x31b1050) 
	[0066.320] RtlExitUserThread (Status=0x0) 

Thread:
	id = 56
	os_tid = 0x13bc

	[0066.322] _alloca_probe () returned 0x40328a
	[0066.322] GetCurrentThreadId () returned 0x13bc
	[0066.322] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.323] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c0
	[0066.323] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=60816) returned 1
	[0066.323] CreateFileMappingA (hFile=0x2c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xed90, lpName=0x0) returned 0x2dc
	[0066.323] MapViewOfFile (hFileMappingObject=0x2dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.335] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.336] CloseHandle (hObject=0x2dc) returned 1
	[0066.336] GetCurrentThreadId () returned 0x13bc
	[0066.336] FlushFileBuffers (hFile=0x2c0) returned 1
	[0066.734] CloseHandle (hObject=0x2c0) returned 1
	[0066.736] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0066.736] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0066.737] free (_Block=0x31b2058) 
	[0066.737] RtlExitUserThread (Status=0x0) 

Thread:
	id = 57
	os_tid = 0x1354

	[0066.348] _alloca_probe () returned 0x40328a
	[0066.349] GetCurrentThreadId () returned 0x1354
	[0066.349] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.349] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x424
	[0066.349] GetFileSizeEx (in: hFile=0x424, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3726) returned 1
	[0066.349] CreateFileMappingA (hFile=0x424, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe9b, lpName=0x0) returned 0x418
	[0066.350] MapViewOfFile (hFileMappingObject=0x418, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.351] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.351] CloseHandle (hObject=0x418) returned 1
	[0066.351] GetCurrentThreadId () returned 0x1354
	[0066.351] FlushFileBuffers (hFile=0x424) returned 1
	[0066.786] CloseHandle (hObject=0x424) returned 1
	[0066.788] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.788] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.788] free (_Block=0x31b3060) 
	[0066.788] RtlExitUserThread (Status=0x0) 

Thread:
	id = 58
	os_tid = 0x1328

	[0066.353] _alloca_probe () returned 0x40328a
	[0066.354] GetCurrentThreadId () returned 0x1328
	[0066.354] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.354] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428
	[0066.354] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=80970) returned 1
	[0066.354] CreateFileMappingA (hFile=0x428, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c53, lpName=0x0) returned 0x42c
	[0066.355] MapViewOfFile (hFileMappingObject=0x42c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.370] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.371] CloseHandle (hObject=0x42c) returned 1
	[0066.371] GetCurrentThreadId () returned 0x1328
	[0066.371] FlushFileBuffers (hFile=0x428) returned 1
	[0066.782] CloseHandle (hObject=0x428) returned 1
	[0066.785] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0066.785] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0066.786] free (_Block=0x31b4068) 
	[0066.786] RtlExitUserThread (Status=0x0) 

Thread:
	id = 59
	os_tid = 0x131c

	[0066.386] _alloca_probe () returned 0x40328a
	[0066.386] GetCurrentThreadId () returned 0x131c
	[0066.386] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.386] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430
	[0066.386] GetFileSizeEx (in: hFile=0x430, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=3314) returned 1
	[0066.387] CreateFileMappingA (hFile=0x430, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcf3, lpName=0x0) returned 0x434
	[0066.387] MapViewOfFile (hFileMappingObject=0x434, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.388] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.388] CloseHandle (hObject=0x434) returned 1
	[0066.388] GetCurrentThreadId () returned 0x131c
	[0066.388] FlushFileBuffers (hFile=0x430) returned 1
	[0066.391] CloseHandle (hObject=0x430) returned 1
	[0066.393] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.393] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.393] free (_Block=0x31b6298) 
	[0066.393] RtlExitUserThread (Status=0x0) 

Thread:
	id = 60
	os_tid = 0x1380

	[0066.582] _alloca_probe () returned 0x40328a
	[0066.582] GetCurrentThreadId () returned 0x1380
	[0066.582] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.583] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430
	[0066.583] GetFileSizeEx (in: hFile=0x430, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=77748) returned 1
	[0066.583] CreateFileMappingA (hFile=0x430, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12fb7, lpName=0x0) returned 0x434
	[0066.583] MapViewOfFile (hFileMappingObject=0x434, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.677] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.677] CloseHandle (hObject=0x434) returned 1
	[0066.677] GetCurrentThreadId () returned 0x1380
	[0066.677] FlushFileBuffers (hFile=0x430) returned 1
	[0067.238] CloseHandle (hObject=0x430) returned 1
	[0067.240] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.241] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.241] free (_Block=0x31b0048) 
	[0067.241] RtlExitUserThread (Status=0x0) 

Thread:
	id = 61
	os_tid = 0x13a4

	[0066.695] _alloca_probe () returned 0x40328a
	[0066.695] GetCurrentThreadId () returned 0x13a4
	[0066.695] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.695] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x438
	[0066.695] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=3419) returned 1
	[0066.695] CreateFileMappingA (hFile=0x438, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd65, lpName=0x0) returned 0x43c
	[0066.695] MapViewOfFile (hFileMappingObject=0x43c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.697] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.697] CloseHandle (hObject=0x43c) returned 1
	[0066.697] GetCurrentThreadId () returned 0x13a4
	[0066.697] FlushFileBuffers (hFile=0x438) returned 1
	[0066.700] CloseHandle (hObject=0x438) returned 1
	[0066.701] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.701] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.702] free (_Block=0x31b72a0) 
	[0066.702] RtlExitUserThread (Status=0x0) 

Thread:
	id = 62
	os_tid = 0x1318

	[0066.703] _alloca_probe () returned 0x40328a
	[0066.704] GetCurrentThreadId () returned 0x1318
	[0066.704] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.704] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x43c
	[0066.704] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=82346) returned 1
	[0066.704] CreateFileMappingA (hFile=0x43c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x141b3, lpName=0x0) returned 0x440
	[0066.704] MapViewOfFile (hFileMappingObject=0x440, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.719] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.720] CloseHandle (hObject=0x440) returned 1
	[0066.720] GetCurrentThreadId () returned 0x1318
	[0066.720] FlushFileBuffers (hFile=0x43c) returned 1
	[0066.723] CloseHandle (hObject=0x43c) returned 1
	[0066.726] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0066.726] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0066.727] free (_Block=0x31b84c8) 
	[0066.727] RtlExitUserThread (Status=0x0) 

Thread:
	id = 63
	os_tid = 0x13a8

	[0066.746] _alloca_probe () returned 0x40328a
	[0066.746] GetCurrentThreadId () returned 0x13a8
	[0066.746] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.747] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x43c
	[0066.747] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8876) returned 1
	[0066.747] CreateFileMappingA (hFile=0x43c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x22b7, lpName=0x0) returned 0x440
	[0066.747] MapViewOfFile (hFileMappingObject=0x440, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.749] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.749] CloseHandle (hObject=0x440) returned 1
	[0066.749] GetCurrentThreadId () returned 0x13a8
	[0066.749] FlushFileBuffers (hFile=0x43c) returned 1
	[0066.752] CloseHandle (hObject=0x43c) returned 1
	[0066.753] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.753] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.754] free (_Block=0x31b72a0) 
	[0066.754] RtlExitUserThread (Status=0x0) 

Thread:
	id = 64
	os_tid = 0x1314

	[0066.755] _alloca_probe () returned 0x40328a
	[0066.756] GetCurrentThreadId () returned 0x1314
	[0066.756] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.756] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440
	[0066.756] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=86284) returned 1
	[0066.756] CreateFileMappingA (hFile=0x440, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15117, lpName=0x0) returned 0x444
	[0066.756] MapViewOfFile (hFileMappingObject=0x444, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.772] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.772] CloseHandle (hObject=0x444) returned 1
	[0066.772] GetCurrentThreadId () returned 0x1314
	[0066.772] FlushFileBuffers (hFile=0x440) returned 1
	[0067.233] CloseHandle (hObject=0x440) returned 1
	[0067.236] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.236] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.237] free (_Block=0x31b72a0) 
	[0067.237] RtlExitUserThread (Status=0x0) 

Thread:
	id = 65
	os_tid = 0xb0

	[0066.801] _alloca_probe () returned 0x40328a
	[0066.801] GetCurrentThreadId () returned 0xb0
	[0066.801] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.802] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428
	[0066.802] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3188) returned 1
	[0066.802] CreateFileMappingA (hFile=0x428, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc77, lpName=0x0) returned 0x444
	[0066.802] MapViewOfFile (hFileMappingObject=0x444, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.803] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.803] CloseHandle (hObject=0x444) returned 1
	[0066.803] GetCurrentThreadId () returned 0xb0
	[0066.803] FlushFileBuffers (hFile=0x428) returned 1
	[0066.807] CloseHandle (hObject=0x428) returned 1
	[0066.808] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.809] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.819] free (_Block=0x31b4068) 
	[0066.819] RtlExitUserThread (Status=0x0) 

Thread:
	id = 66
	os_tid = 0x300

	[0066.821] _alloca_probe () returned 0x40328a
	[0066.821] GetCurrentThreadId () returned 0x300
	[0066.821] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.822] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x444
	[0066.822] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=77232) returned 1
	[0066.822] CreateFileMappingA (hFile=0x444, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12db0, lpName=0x0) returned 0x448
	[0066.822] MapViewOfFile (hFileMappingObject=0x448, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.836] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.837] CloseHandle (hObject=0x448) returned 1
	[0066.837] GetCurrentThreadId () returned 0x300
	[0066.837] FlushFileBuffers (hFile=0x444) returned 1
	[0067.247] CloseHandle (hObject=0x444) returned 1
	[0067.249] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.249] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.250] free (_Block=0x31b82a8) 
	[0067.250] RtlExitUserThread (Status=0x0) 

Thread:
	id = 67
	os_tid = 0x122c

	[0066.883] _alloca_probe () returned 0x40328a
	[0066.883] GetCurrentThreadId () returned 0x122c
	[0066.883] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.883] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x44c
	[0066.883] GetFileSizeEx (in: hFile=0x44c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3702) returned 1
	[0066.884] CreateFileMappingA (hFile=0x44c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe7b, lpName=0x0) returned 0x450
	[0066.884] MapViewOfFile (hFileMappingObject=0x450, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.885] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.885] CloseHandle (hObject=0x450) returned 1
	[0066.885] GetCurrentThreadId () returned 0x122c
	[0066.885] FlushFileBuffers (hFile=0x44c) returned 1
	[0066.887] CloseHandle (hObject=0x44c) returned 1
	[0066.888] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.888] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.889] free (_Block=0x31b92b0) 
	[0066.889] RtlExitUserThread (Status=0x0) 

Thread:
	id = 68
	os_tid = 0x1018

	[0066.890] _alloca_probe () returned 0x40328a
	[0066.891] GetCurrentThreadId () returned 0x1018
	[0066.891] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0066.891] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450
	[0066.891] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=77022) returned 1
	[0066.891] CreateFileMappingA (hFile=0x450, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12ceb, lpName=0x0) returned 0x454
	[0066.891] MapViewOfFile (hFileMappingObject=0x454, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.906] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.906] CloseHandle (hObject=0x454) returned 1
	[0066.906] GetCurrentThreadId () returned 0x1018
	[0066.906] FlushFileBuffers (hFile=0x450) returned 1
	[0067.251] CloseHandle (hObject=0x450) returned 1
	[0067.253] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.253] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.254] free (_Block=0x31b92b0) 
	[0067.254] RtlExitUserThread (Status=0x0) 

Thread:
	id = 70
	os_tid = 0x1224

	[0066.920] _alloca_probe () returned 0x40328a
	[0066.920] GetCurrentThreadId () returned 0x1224
	[0066.920] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0066.920] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458
	[0066.920] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=3526) returned 1
	[0066.920] CreateFileMappingA (hFile=0x458, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdcb, lpName=0x0) returned 0x45c
	[0066.921] MapViewOfFile (hFileMappingObject=0x45c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0066.922] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0066.922] CloseHandle (hObject=0x45c) returned 1
	[0066.922] GetCurrentThreadId () returned 0x1224
	[0066.922] FlushFileBuffers (hFile=0x458) returned 1
	[0066.925] CloseHandle (hObject=0x458) returned 1
	[0066.927] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0066.927] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0066.927] free (_Block=0x31bb2c0) 
	[0066.927] RtlExitUserThread (Status=0x0) 

Thread:
	id = 71
	os_tid = 0x12a4

	[0067.262] _alloca_probe () returned 0x40328a
	[0067.262] GetCurrentThreadId () returned 0x12a4
	[0067.262] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.263] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x444
	[0067.263] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=82962) returned 1
	[0067.263] CreateFileMappingA (hFile=0x444, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14413, lpName=0x0) returned 0x430
	[0067.263] MapViewOfFile (hFileMappingObject=0x430, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.280] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.281] CloseHandle (hObject=0x430) returned 1
	[0067.281] GetCurrentThreadId () returned 0x12a4
	[0067.281] FlushFileBuffers (hFile=0x444) returned 1
	[0067.455] CloseHandle (hObject=0x444) returned 1
	[0067.459] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.459] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.459] free (_Block=0x31b0048) 
	[0067.459] RtlExitUserThread (Status=0x0) 

Thread:
	id = 72
	os_tid = 0x1220

	[0067.292] _alloca_probe () returned 0x40328a
	[0067.293] GetCurrentThreadId () returned 0x1220
	[0067.293] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.293] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440
	[0067.293] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=6851) returned 1
	[0067.293] CreateFileMappingA (hFile=0x440, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ac5, lpName=0x0) returned 0x458
	[0067.293] MapViewOfFile (hFileMappingObject=0x458, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.295] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.295] CloseHandle (hObject=0x458) returned 1
	[0067.295] GetCurrentThreadId () returned 0x1220
	[0067.295] FlushFileBuffers (hFile=0x440) returned 1
	[0067.300] CloseHandle (hObject=0x440) returned 1
	[0067.302] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.302] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.303] free (_Block=0x31b72a0) 
	[0067.303] RtlExitUserThread (Status=0x0) 

Thread:
	id = 73
	os_tid = 0x348

	[0067.305] _alloca_probe () returned 0x40328a
	[0067.305] GetCurrentThreadId () returned 0x348
	[0067.305] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.306] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458
	[0067.306] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=72076) returned 1
	[0067.306] CreateFileMappingA (hFile=0x458, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11997, lpName=0x0) returned 0x45c
	[0067.306] MapViewOfFile (hFileMappingObject=0x45c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.320] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.321] CloseHandle (hObject=0x45c) returned 1
	[0067.321] GetCurrentThreadId () returned 0x348
	[0067.321] FlushFileBuffers (hFile=0x458) returned 1
	[0067.468] CloseHandle (hObject=0x458) returned 1
	[0067.470] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.471] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.471] free (_Block=0x31b72a0) 
	[0067.471] RtlExitUserThread (Status=0x0) 

Thread:
	id = 74
	os_tid = 0xfd4

	[0067.333] _alloca_probe () returned 0x40328a
	[0067.334] GetCurrentThreadId () returned 0xfd4
	[0067.334] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.334] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x460
	[0067.334] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=4254) returned 1
	[0067.334] CreateFileMappingA (hFile=0x460, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10ab, lpName=0x0) returned 0x464
	[0067.334] MapViewOfFile (hFileMappingObject=0x464, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.336] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.336] CloseHandle (hObject=0x464) returned 1
	[0067.336] GetCurrentThreadId () returned 0xfd4
	[0067.336] FlushFileBuffers (hFile=0x460) returned 1
	[0067.338] CloseHandle (hObject=0x460) returned 1
	[0067.340] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.340] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.340] free (_Block=0x31b92b0) 
	[0067.340] RtlExitUserThread (Status=0x0) 

Thread:
	id = 75
	os_tid = 0xfe8

	[0067.342] _alloca_probe () returned 0x40328a
	[0067.342] GetCurrentThreadId () returned 0xfe8
	[0067.342] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.343] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x464
	[0067.343] GetFileSizeEx (in: hFile=0x464, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=86442) returned 1
	[0067.343] CreateFileMappingA (hFile=0x464, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x151b3, lpName=0x0) returned 0x468
	[0067.343] MapViewOfFile (hFileMappingObject=0x468, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.359] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.360] CloseHandle (hObject=0x468) returned 1
	[0067.360] GetCurrentThreadId () returned 0xfe8
	[0067.360] FlushFileBuffers (hFile=0x464) returned 1
	[0067.461] CloseHandle (hObject=0x464) returned 1
	[0067.464] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.464] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.465] free (_Block=0x31bc2c8) 
	[0067.465] RtlExitUserThread (Status=0x0) 

Thread:
	id = 76
	os_tid = 0xffc

	[0067.373] _alloca_probe () returned 0x40328a
	[0067.373] GetCurrentThreadId () returned 0xffc
	[0067.373] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.374] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x46c
	[0067.374] GetFileSizeEx (in: hFile=0x46c, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=3643) returned 1
	[0067.374] CreateFileMappingA (hFile=0x46c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe45, lpName=0x0) returned 0x470
	[0067.374] MapViewOfFile (hFileMappingObject=0x470, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.375] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.375] CloseHandle (hObject=0x470) returned 1
	[0067.375] GetCurrentThreadId () returned 0xffc
	[0067.375] FlushFileBuffers (hFile=0x46c) returned 1
	[0067.377] CloseHandle (hObject=0x46c) returned 1
	[0067.379] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.379] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.379] free (_Block=0x31bd2d0) 
	[0067.379] RtlExitUserThread (Status=0x0) 

Thread:
	id = 78
	os_tid = 0x4e4

	[0067.474] _alloca_probe () returned 0x40328a
	[0067.474] GetCurrentThreadId () returned 0x4e4
	[0067.474] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.474] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x464
	[0067.474] GetFileSizeEx (in: hFile=0x464, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=80060) returned 1
	[0067.474] CreateFileMappingA (hFile=0x464, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x138c7, lpName=0x0) returned 0x444
	[0067.475] MapViewOfFile (hFileMappingObject=0x444, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.489] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.490] CloseHandle (hObject=0x444) returned 1
	[0067.490] GetCurrentThreadId () returned 0x4e4
	[0067.490] FlushFileBuffers (hFile=0x464) returned 1
	[0067.659] CloseHandle (hObject=0x464) returned 1
	[0067.661] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.661] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.662] free (_Block=0x31b72a0) 
	[0067.662] RtlExitUserThread (Status=0x0) 

Thread:
	id = 80
	os_tid = 0x384

	[0067.506] _alloca_probe () returned 0x40328a
	[0067.506] GetCurrentThreadId () returned 0x384
	[0067.506] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.506] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x46c
	[0067.507] GetFileSizeEx (in: hFile=0x46c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=10125) returned 1
	[0067.507] CreateFileMappingA (hFile=0x46c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2799, lpName=0x0) returned 0x470
	[0067.507] MapViewOfFile (hFileMappingObject=0x470, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.509] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.509] CloseHandle (hObject=0x470) returned 1
	[0067.509] GetCurrentThreadId () returned 0x384
	[0067.509] FlushFileBuffers (hFile=0x46c) returned 1
	[0067.779] CloseHandle (hObject=0x46c) returned 1
	[0067.780] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.780] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.781] free (_Block=0x31bc2c8) 
	[0067.781] RtlExitUserThread (Status=0x0) 

Thread:
	id = 81
	os_tid = 0x4ec

	[0067.512] _alloca_probe () returned 0x40328a
	[0067.512] GetCurrentThreadId () returned 0x4ec
	[0067.512] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.512] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x474
	[0067.513] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=68226) returned 1
	[0067.513] CreateFileMappingA (hFile=0x474, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10a83, lpName=0x0) returned 0x478
	[0067.513] MapViewOfFile (hFileMappingObject=0x478, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.526] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.527] CloseHandle (hObject=0x478) returned 1
	[0067.527] GetCurrentThreadId () returned 0x4ec
	[0067.527] FlushFileBuffers (hFile=0x474) returned 1
	[0067.529] CloseHandle (hObject=0x474) returned 1
	[0067.532] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.532] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.532] free (_Block=0x31bd2d0) 
	[0067.532] RtlExitUserThread (Status=0x0) 

Thread:
	id = 82
	os_tid = 0x368

	[0067.543] _alloca_probe () returned 0x40328a
	[0067.544] GetCurrentThreadId () returned 0x368
	[0067.544] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.544] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478
	[0067.544] GetFileSizeEx (in: hFile=0x478, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=12687) returned 1
	[0067.544] CreateFileMappingA (hFile=0x478, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x319d, lpName=0x0) returned 0x47c
	[0067.545] MapViewOfFile (hFileMappingObject=0x47c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.547] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.548] CloseHandle (hObject=0x47c) returned 1
	[0067.548] GetCurrentThreadId () returned 0x368
	[0067.548] FlushFileBuffers (hFile=0x478) returned 1
	[0067.553] CloseHandle (hObject=0x478) returned 1
	[0067.554] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.554] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.555] free (_Block=0x31be2d8) 
	[0067.555] RtlExitUserThread (Status=0x0) 

Thread:
	id = 83
	os_tid = 0xa20

	[0067.556] _alloca_probe () returned 0x40328a
	[0067.556] GetCurrentThreadId () returned 0xa20
	[0067.556] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.557] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c
	[0067.557] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=65238) returned 1
	[0067.557] CreateFileMappingA (hFile=0x47c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfedb, lpName=0x0) returned 0x480
	[0067.557] MapViewOfFile (hFileMappingObject=0x480, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.569] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.570] CloseHandle (hObject=0x480) returned 1
	[0067.570] GetCurrentThreadId () returned 0xa20
	[0067.570] FlushFileBuffers (hFile=0x47c) returned 1
	[0067.665] CloseHandle (hObject=0x47c) returned 1
	[0067.667] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.667] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.668] free (_Block=0x31bf2e0) 
	[0067.668] RtlExitUserThread (Status=0x0) 

Thread:
	id = 84
	os_tid = 0xd50

	[0067.680] _alloca_probe () returned 0x40328a
	[0067.681] GetCurrentThreadId () returned 0xd50
	[0067.681] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.682] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x464
	[0067.682] GetFileSizeEx (in: hFile=0x464, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3546) returned 1
	[0067.682] CreateFileMappingA (hFile=0x464, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xde3, lpName=0x0) returned 0x480
	[0067.682] MapViewOfFile (hFileMappingObject=0x480, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.683] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.683] CloseHandle (hObject=0x480) returned 1
	[0067.683] GetCurrentThreadId () returned 0xd50
	[0067.683] FlushFileBuffers (hFile=0x464) returned 1
	[0067.685] CloseHandle (hObject=0x464) returned 1
	[0067.687] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.687] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.687] free (_Block=0x31be2d8) 
	[0067.687] RtlExitUserThread (Status=0x0) 

Thread:
	id = 85
	os_tid = 0xd54

	[0067.689] _alloca_probe () returned 0x40328a
	[0067.690] GetCurrentThreadId () returned 0xd54
	[0067.690] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.690] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x480
	[0067.690] GetFileSizeEx (in: hFile=0x480, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=79634) returned 1
	[0067.690] CreateFileMappingA (hFile=0x480, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13713, lpName=0x0) returned 0x484
	[0067.691] MapViewOfFile (hFileMappingObject=0x484, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.706] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.707] CloseHandle (hObject=0x484) returned 1
	[0067.707] GetCurrentThreadId () returned 0xd54
	[0067.707] FlushFileBuffers (hFile=0x480) returned 1
	[0067.813] CloseHandle (hObject=0x480) returned 1
	[0067.815] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0067.815] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0067.816] free (_Block=0x31be2d8) 
	[0067.816] RtlExitUserThread (Status=0x0) 

Thread:
	id = 86
	os_tid = 0x1300

	[0067.721] _alloca_probe () returned 0x40328a
	[0067.722] GetCurrentThreadId () returned 0x1300
	[0067.722] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.722] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x488
	[0067.722] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=3046) returned 1
	[0067.722] CreateFileMappingA (hFile=0x488, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbeb, lpName=0x0) returned 0x48c
	[0067.722] MapViewOfFile (hFileMappingObject=0x48c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.723] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.723] CloseHandle (hObject=0x48c) returned 1
	[0067.723] GetCurrentThreadId () returned 0x1300
	[0067.723] FlushFileBuffers (hFile=0x488) returned 1
	[0067.783] CloseHandle (hObject=0x488) returned 1
	[0067.785] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.785] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.785] free (_Block=0x31c02e8) 
	[0067.785] RtlExitUserThread (Status=0x0) 

Thread:
	id = 87
	os_tid = 0xf0c

	[0067.731] _alloca_probe () returned 0x40328a
	[0067.731] GetCurrentThreadId () returned 0xf0c
	[0067.731] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.732] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x490
	[0067.732] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=79296) returned 1
	[0067.732] CreateFileMappingA (hFile=0x490, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x135c0, lpName=0x0) returned 0x494
	[0067.732] MapViewOfFile (hFileMappingObject=0x494, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.747] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.748] CloseHandle (hObject=0x494) returned 1
	[0067.748] GetCurrentThreadId () returned 0xf0c
	[0067.748] FlushFileBuffers (hFile=0x490) returned 1
	[0068.090] CloseHandle (hObject=0x490) returned 1
	[0068.093] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.093] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.094] free (_Block=0x31c12f0) 
	[0068.094] RtlExitUserThread (Status=0x0) 

Thread:
	id = 88
	os_tid = 0xf14

	[0067.763] _alloca_probe () returned 0x40328a
	[0067.764] GetCurrentThreadId () returned 0xf14
	[0067.764] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.764] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x498
	[0067.764] GetFileSizeEx (in: hFile=0x498, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=4040) returned 1
	[0067.764] CreateFileMappingA (hFile=0x498, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfcf, lpName=0x0) returned 0x49c
	[0067.764] MapViewOfFile (hFileMappingObject=0x49c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.766] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.766] CloseHandle (hObject=0x49c) returned 1
	[0067.766] GetCurrentThreadId () returned 0xf14
	[0067.766] FlushFileBuffers (hFile=0x498) returned 1
	[0067.768] CloseHandle (hObject=0x498) returned 1
	[0067.770] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0067.770] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0067.770] free (_Block=0x31c3300) 
	[0067.770] RtlExitUserThread (Status=0x0) 

Thread:
	id = 91
	os_tid = 0x29c

	[0067.959] _alloca_probe () returned 0x40328a
	[0067.960] GetCurrentThreadId () returned 0x29c
	[0067.960] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0067.960] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x488
	[0067.960] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=82374) returned 1
	[0067.960] CreateFileMappingA (hFile=0x488, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x141cb, lpName=0x0) returned 0x46c
	[0067.960] MapViewOfFile (hFileMappingObject=0x46c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0067.976] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0067.977] CloseHandle (hObject=0x46c) returned 1
	[0067.977] GetCurrentThreadId () returned 0x29c
	[0067.977] FlushFileBuffers (hFile=0x488) returned 1
	[0068.199] CloseHandle (hObject=0x488) returned 1
	[0068.202] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.202] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.203] free (_Block=0x31be2d8) 
	[0068.203] RtlExitUserThread (Status=0x0) 

Thread:
	id = 92
	os_tid = 0xba4

	[0067.998] _alloca_probe () returned 0x40328a
	[0067.999] GetCurrentThreadId () returned 0xba4
	[0067.999] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0067.999] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x498
	[0067.999] GetFileSizeEx (in: hFile=0x498, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3683) returned 1
	[0067.999] CreateFileMappingA (hFile=0x498, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe65, lpName=0x0) returned 0x49c
	[0068.000] MapViewOfFile (hFileMappingObject=0x49c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.001] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.001] CloseHandle (hObject=0x49c) returned 1
	[0068.001] GetCurrentThreadId () returned 0xba4
	[0068.001] FlushFileBuffers (hFile=0x498) returned 1
	[0068.003] CloseHandle (hObject=0x498) returned 1
	[0068.005] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.005] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.008] free (_Block=0x31bc2c8) 
	[0068.009] RtlExitUserThread (Status=0x0) 

Thread:
	id = 93
	os_tid = 0xdd4

	[0068.010] _alloca_probe () returned 0x40328a
	[0068.010] GetCurrentThreadId () returned 0xdd4
	[0068.010] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.011] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x49c
	[0068.011] GetFileSizeEx (in: hFile=0x49c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=80738) returned 1
	[0068.011] CreateFileMappingA (hFile=0x49c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b63, lpName=0x0) returned 0x4a0
	[0068.011] MapViewOfFile (hFileMappingObject=0x4a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.028] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.028] CloseHandle (hObject=0x4a0) returned 1
	[0068.028] GetCurrentThreadId () returned 0xdd4
	[0068.028] FlushFileBuffers (hFile=0x49c) returned 1
	[0068.177] CloseHandle (hObject=0x49c) returned 1
	[0068.180] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.180] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.181] free (_Block=0x31c3300) 
	[0068.181] RtlExitUserThread (Status=0x0) 

Thread:
	id = 94
	os_tid = 0xbb0

	[0068.045] _alloca_probe () returned 0x40328a
	[0068.045] GetCurrentThreadId () returned 0xbb0
	[0068.045] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0068.046] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a4
	[0068.046] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=54456) returned 1
	[0068.046] CreateFileMappingA (hFile=0x4a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd4bf, lpName=0x0) returned 0x4a8
	[0068.046] MapViewOfFile (hFileMappingObject=0x4a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.057] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.057] CloseHandle (hObject=0x4a8) returned 1
	[0068.057] GetCurrentThreadId () returned 0xbb0
	[0068.057] FlushFileBuffers (hFile=0x4a4) returned 1
	[0068.061] CloseHandle (hObject=0x4a4) returned 1
	[0068.064] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.064] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.064] free (_Block=0x31c4308) 
	[0068.064] RtlExitUserThread (Status=0x0) 

Thread:
	id = 95
	os_tid = 0x868

	[0068.060] _alloca_probe () returned 0x40328a
	[0068.060] GetCurrentThreadId () returned 0x868
	[0068.060] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.060] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4ac
	[0068.060] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=81482) returned 1
	[0068.061] CreateFileMappingA (hFile=0x4ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13e53, lpName=0x0) returned 0x4b0
	[0068.061] MapViewOfFile (hFileMappingObject=0x4b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.079] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.080] CloseHandle (hObject=0x4b0) returned 1
	[0068.080] GetCurrentThreadId () returned 0x868
	[0068.080] FlushFileBuffers (hFile=0x4ac) returned 1
	[0068.204] CloseHandle (hObject=0x4ac) returned 1
	[0068.206] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.207] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.207] free (_Block=0x31c5310) 
	[0068.207] RtlExitUserThread (Status=0x0) 

Thread:
	id = 96
	os_tid = 0x564

	[0068.104] _alloca_probe () returned 0x40328a
	[0068.104] GetCurrentThreadId () returned 0x564
	[0068.104] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0068.105] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b0
	[0068.105] GetFileSizeEx (in: hFile=0x4b0, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=3865) returned 1
	[0068.105] CreateFileMappingA (hFile=0x4b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf21, lpName=0x0) returned 0x4a4
	[0068.105] MapViewOfFile (hFileMappingObject=0x4a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.106] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.107] CloseHandle (hObject=0x4a4) returned 1
	[0068.107] GetCurrentThreadId () returned 0x564
	[0068.107] FlushFileBuffers (hFile=0x4b0) returned 1
	[0068.111] CloseHandle (hObject=0x4b0) returned 1
	[0068.113] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.113] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.113] free (_Block=0x31c4308) 
	[0068.113] RtlExitUserThread (Status=0x0) 

Thread:
	id = 97
	os_tid = 0xe08

	[0068.115] _alloca_probe () returned 0x40328a
	[0068.116] GetCurrentThreadId () returned 0xe08
	[0068.116] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.117] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a4
	[0068.117] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=77680) returned 1
	[0068.117] CreateFileMappingA (hFile=0x4a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12f70, lpName=0x0) returned 0x4b4
	[0068.117] MapViewOfFile (hFileMappingObject=0x4b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.131] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.132] CloseHandle (hObject=0x4b4) returned 1
	[0068.132] GetCurrentThreadId () returned 0xe08
	[0068.132] FlushFileBuffers (hFile=0x4a4) returned 1
	[0068.211] CloseHandle (hObject=0x4a4) returned 1
	[0068.214] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.214] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.215] free (_Block=0x31c4308) 
	[0068.215] RtlExitUserThread (Status=0x0) 

Thread:
	id = 98
	os_tid = 0xca4

	[0068.145] _alloca_probe () returned 0x40328a
	[0068.146] GetCurrentThreadId () returned 0xca4
	[0068.146] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0068.146] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b8
	[0068.146] GetFileSizeEx (in: hFile=0x4b8, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=3859) returned 1
	[0068.146] CreateFileMappingA (hFile=0x4b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf15, lpName=0x0) returned 0x4bc
	[0068.146] MapViewOfFile (hFileMappingObject=0x4bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.148] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.148] CloseHandle (hObject=0x4bc) returned 1
	[0068.148] GetCurrentThreadId () returned 0xca4
	[0068.148] FlushFileBuffers (hFile=0x4b8) returned 1
	[0068.150] CloseHandle (hObject=0x4b8) returned 1
	[0068.152] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.152] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.152] free (_Block=0x31c7540) 
	[0068.153] RtlExitUserThread (Status=0x0) 

Thread:
	id = 99
	os_tid = 0xb00

	[0068.154] _alloca_probe () returned 0x40328a
	[0068.154] GetCurrentThreadId () returned 0xb00
	[0068.154] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.155] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4bc
	[0068.155] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=76818) returned 1
	[0068.155] CreateFileMappingA (hFile=0x4bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12c13, lpName=0x0) returned 0x4c0
	[0068.155] MapViewOfFile (hFileMappingObject=0x4c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.169] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.169] CloseHandle (hObject=0x4c0) returned 1
	[0068.170] GetCurrentThreadId () returned 0xb00
	[0068.170] FlushFileBuffers (hFile=0x4bc) returned 1
	[0068.218] CloseHandle (hObject=0x4bc) returned 1
	[0068.220] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.220] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.221] free (_Block=0x31c8548) 
	[0068.222] RtlExitUserThread (Status=0x0) 

Thread:
	id = 100
	os_tid = 0xd34

	[0068.188] _alloca_probe () returned 0x40328a
	[0068.189] GetCurrentThreadId () returned 0xd34
	[0068.189] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0068.189] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c0
	[0068.189] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=5827) returned 1
	[0068.189] CreateFileMappingA (hFile=0x4c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16c5, lpName=0x0) returned 0x4c4
	[0068.189] MapViewOfFile (hFileMappingObject=0x4c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.191] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.191] CloseHandle (hObject=0x4c4) returned 1
	[0068.191] GetCurrentThreadId () returned 0xd34
	[0068.191] FlushFileBuffers (hFile=0x4c0) returned 1
	[0068.350] CloseHandle (hObject=0x4c0) returned 1
	[0068.351] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.351] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.352] free (_Block=0x31c7540) 
	[0068.352] RtlExitUserThread (Status=0x0) 

Thread:
	id = 102
	os_tid = 0x1a0

	[0068.286] _alloca_probe () returned 0x40328a
	[0068.286] GetCurrentThreadId () returned 0x1a0
	[0068.286] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.287] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a4
	[0068.287] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=60684) returned 1
	[0068.287] CreateFileMappingA (hFile=0x4a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xed17, lpName=0x0) returned 0x4ac
	[0068.287] MapViewOfFile (hFileMappingObject=0x4ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.298] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.299] CloseHandle (hObject=0x4ac) returned 1
	[0068.299] GetCurrentThreadId () returned 0x1a0
	[0068.299] FlushFileBuffers (hFile=0x4a4) returned 1
	[0068.436] CloseHandle (hObject=0x4a4) returned 1
	[0068.438] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.438] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.440] free (_Block=0x31be2d8) 
	[0068.440] RtlExitUserThread (Status=0x0) 

Thread:
	id = 103
	os_tid = 0x258

	[0068.312] _alloca_probe () returned 0x40328a
	[0068.312] GetCurrentThreadId () returned 0x258
	[0068.312] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0068.313] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x488
	[0068.313] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=4015) returned 1
	[0068.313] CreateFileMappingA (hFile=0x488, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfbd, lpName=0x0) returned 0x4c4
	[0068.313] MapViewOfFile (hFileMappingObject=0x4c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.314] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.315] CloseHandle (hObject=0x4c4) returned 1
	[0068.315] GetCurrentThreadId () returned 0x258
	[0068.315] FlushFileBuffers (hFile=0x488) returned 1
	[0068.317] CloseHandle (hObject=0x488) returned 1
	[0068.318] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.318] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.319] free (_Block=0x31c5310) 
	[0068.319] RtlExitUserThread (Status=0x0) 

Thread:
	id = 104
	os_tid = 0x394

	[0068.320] _alloca_probe () returned 0x40328a
	[0068.321] GetCurrentThreadId () returned 0x394
	[0068.321] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.321] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c4
	[0068.321] GetFileSizeEx (in: hFile=0x4c4, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=80254) returned 1
	[0068.321] CreateFileMappingA (hFile=0x4c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1398b, lpName=0x0) returned 0x4c8
	[0068.321] MapViewOfFile (hFileMappingObject=0x4c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.338] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.338] CloseHandle (hObject=0x4c8) returned 1
	[0068.339] GetCurrentThreadId () returned 0x394
	[0068.339] FlushFileBuffers (hFile=0x4c4) returned 1
	[0068.440] CloseHandle (hObject=0x4c4) returned 1
	[0068.443] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.443] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.445] free (_Block=0x31c8548) 
	[0068.445] RtlExitUserThread (Status=0x0) 

Thread:
	id = 105
	os_tid = 0x3e0

	[0068.360] _alloca_probe () returned 0x40328a
	[0068.360] GetCurrentThreadId () returned 0x3e0
	[0068.360] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0068.361] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c8
	[0068.361] GetFileSizeEx (in: hFile=0x4c8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=6309) returned 1
	[0068.361] CreateFileMappingA (hFile=0x4c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18a9, lpName=0x0) returned 0x4cc
	[0068.361] MapViewOfFile (hFileMappingObject=0x4cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.363] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.363] CloseHandle (hObject=0x4cc) returned 1
	[0068.363] GetCurrentThreadId () returned 0x3e0
	[0068.363] FlushFileBuffers (hFile=0x4c8) returned 1
	[0068.616] CloseHandle (hObject=0x4c8) returned 1
	[0068.617] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.617] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.617] free (_Block=0x31c5310) 
	[0068.617] RtlExitUserThread (Status=0x0) 

Thread:
	id = 106
	os_tid = 0x5a4

	[0068.365] _alloca_probe () returned 0x40328a
	[0068.366] GetCurrentThreadId () returned 0x5a4
	[0068.366] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.366] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d0
	[0068.366] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=60816) returned 1
	[0068.366] CreateFileMappingA (hFile=0x4d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xed90, lpName=0x0) returned 0x4d4
	[0068.366] MapViewOfFile (hFileMappingObject=0x4d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.380] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.380] CloseHandle (hObject=0x4d4) returned 1
	[0068.380] GetCurrentThreadId () returned 0x5a4
	[0068.380] FlushFileBuffers (hFile=0x4d0) returned 1
	[0068.618] CloseHandle (hObject=0x4d0) returned 1
	[0068.620] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.620] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.621] free (_Block=0x31c9550) 
	[0068.621] RtlExitUserThread (Status=0x0) 

Thread:
	id = 107
	os_tid = 0x6c4

	[0068.456] _alloca_probe () returned 0x40328a
	[0068.456] GetCurrentThreadId () returned 0x6c4
	[0068.456] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0068.457] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a4
	[0068.457] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3069) returned 1
	[0068.457] CreateFileMappingA (hFile=0x4a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc09, lpName=0x0) returned 0x4d4
	[0068.457] MapViewOfFile (hFileMappingObject=0x4d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.458] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.458] CloseHandle (hObject=0x4d4) returned 1
	[0068.458] GetCurrentThreadId () returned 0x6c4
	[0068.458] FlushFileBuffers (hFile=0x4a4) returned 1
	[0068.460] CloseHandle (hObject=0x4a4) returned 1
	[0068.462] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0068.462] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0068.462] free (_Block=0x31be2d8) 
	[0068.462] RtlExitUserThread (Status=0x0) 

Thread:
	id = 108
	os_tid = 0x126c

	[0068.464] _alloca_probe () returned 0x40328a
	[0068.465] GetCurrentThreadId () returned 0x126c
	[0068.465] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0068.465] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d4
	[0068.465] GetFileSizeEx (in: hFile=0x4d4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=79996) returned 1
	[0068.465] CreateFileMappingA (hFile=0x4d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13887, lpName=0x0) returned 0x4d8
	[0068.465] MapViewOfFile (hFileMappingObject=0x4d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.481] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.481] CloseHandle (hObject=0x4d8) returned 1
	[0068.482] GetCurrentThreadId () returned 0x126c
	[0068.482] FlushFileBuffers (hFile=0x4d4) returned 1
	[0068.632] CloseHandle (hObject=0x4d4) returned 1
	[0068.635] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0068.635] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0068.636] free (_Block=0x31be2d8) 
	[0068.636] RtlExitUserThread (Status=0x0) 

Thread:
	id = 109
	os_tid = 0x73c

	[0068.495] _alloca_probe () returned 0x40328a
	[0068.495] GetCurrentThreadId () returned 0x73c
	[0068.495] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0068.495] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc
	[0068.495] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=201796) returned 1
	[0068.495] CreateFileMappingA (hFile=0x4dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31447, lpName=0x0) returned 0x4e0
	[0068.496] MapViewOfFile (hFileMappingObject=0x4e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3530000
	[0068.535] UnmapViewOfFile (lpBaseAddress=0x3530000) returned 1
	[0068.537] CloseHandle (hObject=0x4e0) returned 1
	[0068.537] GetCurrentThreadId () returned 0x73c
	[0068.537] FlushFileBuffers (hFile=0x4dc) returned 1
	[0068.541] CloseHandle (hObject=0x4dc) returned 1
	[0068.547] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___Parameterinfo.xml") returned 75
	[0068.547] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\coronavi2022@protonmail.ch___parameterinfo.xml")) returned 1
	[0068.547] free (_Block=0x31cb560) 
	[0068.547] RtlExitUserThread (Status=0x0) 

Thread:
	id = 110
	os_tid = 0x84

	[0068.549] _alloca_probe () returned 0x40328a
	[0068.550] GetCurrentThreadId () returned 0x84
	[0068.550] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0068.550] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4e0
	[0068.551] GetFileSizeEx (in: hFile=0x4e0, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=39042) returned 1
	[0068.551] CreateFileMappingA (hFile=0x4e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9883, lpName=0x0) returned 0x4e4
	[0068.551] MapViewOfFile (hFileMappingObject=0x4e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.559] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.559] CloseHandle (hObject=0x4e4) returned 1
	[0068.560] GetCurrentThreadId () returned 0x84
	[0068.560] FlushFileBuffers (hFile=0x4e0) returned 1
	[0068.562] CloseHandle (hObject=0x4e0) returned 1
	[0068.564] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___UiInfo.xml") returned 68
	[0068.564] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\coronavi2022@protonmail.ch___uiinfo.xml")) returned 1
	[0068.567] free (_Block=0x31cc568) 
	[0068.567] RtlExitUserThread (Status=0x0) 

Thread:
	id = 111
	os_tid = 0xbdc

	[0068.575] _alloca_probe () returned 0x40328a
	[0068.576] GetCurrentThreadId () returned 0xbdc
	[0068.576] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0068.576] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230
	[0068.576] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=93314) returned 1
	[0068.576] CreateFileMappingA (hFile=0x230, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16c83, lpName=0x0) returned 0x4e8
	[0068.576] MapViewOfFile (hFileMappingObject=0x4e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.594] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.595] CloseHandle (hObject=0x4e8) returned 1
	[0068.595] GetCurrentThreadId () returned 0xbdc
	[0068.595] FlushFileBuffers (hFile=0x230) returned 1
	[0068.684] CloseHandle (hObject=0x230) returned 1
	[0068.687] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___Parameterinfo.xml") returned 77
	[0068.687] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\coronavi2022@protonmail.ch___parameterinfo.xml")) returned 1
	[0068.688] free (_Block=0x31cd570) 
	[0068.688] RtlExitUserThread (Status=0x0) 

Thread:
	id = 112
	os_tid = 0x428

	[0068.599] _alloca_probe () returned 0x40328a
	[0068.599] GetCurrentThreadId () returned 0x428
	[0068.599] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0068.599] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4ec
	[0068.600] GetFileSizeEx (in: hFile=0x4ec, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=39050) returned 1
	[0068.600] CreateFileMappingA (hFile=0x4ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9893, lpName=0x0) returned 0x4f0
	[0068.600] MapViewOfFile (hFileMappingObject=0x4f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.608] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.608] CloseHandle (hObject=0x4f0) returned 1
	[0068.608] GetCurrentThreadId () returned 0x428
	[0068.608] FlushFileBuffers (hFile=0x4ec) returned 1
	[0068.689] CloseHandle (hObject=0x4ec) returned 1
	[0068.691] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___UiInfo.xml") returned 70
	[0068.691] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\coronavi2022@protonmail.ch___uiinfo.xml")) returned 1
	[0068.696] free (_Block=0x31ce578) 
	[0068.696] RtlExitUserThread (Status=0x0) 

Thread:
	id = 113
	os_tid = 0x168

	[0068.661] _alloca_probe () returned 0x40328a
	[0068.662] GetCurrentThreadId () returned 0x168
	[0068.662] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp", dwFileAttributes=0x80) returned 1
	[0068.662] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d4
	[0068.662] GetFileSizeEx (in: hFile=0x4d4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3628) returned 1
	[0068.662] CreateFileMappingA (hFile=0x4d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe37, lpName=0x0) returned 0x4d0
	[0068.663] MapViewOfFile (hFileMappingObject=0x4d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0068.664] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0068.664] CloseHandle (hObject=0x4d0) returned 1
	[0068.664] GetCurrentThreadId () returned 0x168
	[0068.664] FlushFileBuffers (hFile=0x4d4) returned 1
	[0069.073] CloseHandle (hObject=0x4d4) returned 1
	[0069.075] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___header.bmp") returned 61
	[0069.075] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___header.bmp" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___header.bmp")) returned 1
	[0069.075] free (_Block=0x31c9550) 
	[0069.075] RtlExitUserThread (Status=0x0) 

Thread:
	id = 114
	os_tid = 0x4b4

	[0068.699] _alloca_probe () returned 0x40328a
	[0068.700] GetCurrentThreadId () returned 0x4b4
	[0068.700] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", dwFileAttributes=0x80) returned 1
	[0068.700] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230
	[0068.700] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=272046) returned 1
	[0068.700] CreateFileMappingA (hFile=0x230, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x426bb, lpName=0x0) returned 0x4d0
	[0068.701] MapViewOfFile (hFileMappingObject=0x4d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0068.749] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0068.752] CloseHandle (hObject=0x4d0) returned 1
	[0068.752] GetCurrentThreadId () returned 0x4b4
	[0068.752] FlushFileBuffers (hFile=0x230) returned 1
	[0068.754] CloseHandle (hObject=0x230) returned 1
	[0068.761] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___ParameterInfo.xml") returned 68
	[0068.761] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___parameterinfo.xml")) returned 1
	[0068.761] free (_Block=0x31c5310) 
	[0068.761] RtlExitUserThread (Status=0x0) 

Thread:
	id = 115
	os_tid = 0xed8

	[0068.777] _alloca_probe () returned 0x40328a
	[0068.777] GetCurrentThreadId () returned 0xed8
	[0068.777] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", dwFileAttributes=0x80) returned 1
	[0068.777] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d0
	[0068.778] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=41080) returned 1
	[0068.778] CreateFileMappingA (hFile=0x4d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa07f, lpName=0x0) returned 0x4c8
	[0068.778] MapViewOfFile (hFileMappingObject=0x4c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.003] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.003] CloseHandle (hObject=0x4c8) returned 1
	[0069.004] GetCurrentThreadId () returned 0xed8
	[0069.004] FlushFileBuffers (hFile=0x4d0) returned 1
	[0069.080] CloseHandle (hObject=0x4d0) returned 1
	[0069.082] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___SplashScreen.bmp") returned 67
	[0069.082] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___splashscreen.bmp")) returned 1
	[0069.088] free (_Block=0x31c5310) 
	[0069.088] RtlExitUserThread (Status=0x0) 

Thread:
	id = 116
	os_tid = 0xec4

	[0069.014] _alloca_probe () returned 0x40328a
	[0069.015] GetCurrentThreadId () returned 0xec4
	[0069.015] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml", dwFileAttributes=0x80) returned 1
	[0069.015] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f0
	[0069.015] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=14084) returned 1
	[0069.015] CreateFileMappingA (hFile=0x4f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3707, lpName=0x0) returned 0x4f4
	[0069.015] MapViewOfFile (hFileMappingObject=0x4f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.019] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.019] CloseHandle (hObject=0x4f4) returned 1
	[0069.019] GetCurrentThreadId () returned 0xec4
	[0069.019] FlushFileBuffers (hFile=0x4f0) returned 1
	[0069.091] CloseHandle (hObject=0x4f0) returned 1
	[0069.093] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___Strings.xml") returned 62
	[0069.093] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___Strings.xml" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___strings.xml")) returned 1
	[0069.093] free (_Block=0x31cd570) 
	[0069.093] RtlExitUserThread (Status=0x0) 

Thread:
	id = 117
	os_tid = 0xf4

	[0069.022] _alloca_probe () returned 0x40328a
	[0069.022] GetCurrentThreadId () returned 0xf4
	[0069.022] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0069.023] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f8
	[0069.023] GetFileSizeEx (in: hFile=0x4f8, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=38898) returned 1
	[0069.023] CreateFileMappingA (hFile=0x4f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x97f3, lpName=0x0) returned 0x4fc
	[0069.023] MapViewOfFile (hFileMappingObject=0x4fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.031] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.031] CloseHandle (hObject=0x4fc) returned 1
	[0069.032] GetCurrentThreadId () returned 0xf4
	[0069.032] FlushFileBuffers (hFile=0x4f8) returned 1
	[0069.095] CloseHandle (hObject=0x4f8) returned 1
	[0069.097] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___UiInfo.xml") returned 61
	[0069.097] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___uiinfo.xml")) returned 1
	[0069.097] free (_Block=0x31ce578) 
	[0069.097] RtlExitUserThread (Status=0x0) 

Thread:
	id = 118
	os_tid = 0xf54

	[0069.034] _alloca_probe () returned 0x40328a
	[0069.034] GetCurrentThreadId () returned 0xf54
	[0069.034] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", dwFileAttributes=0x80) returned 1
	[0069.035] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x500
	[0069.035] GetFileSizeEx (in: hFile=0x500, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=104072) returned 1
	[0069.035] CreateFileMappingA (hFile=0x500, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1968f, lpName=0x0) returned 0x504
	[0069.035] MapViewOfFile (hFileMappingObject=0x504, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.055] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.056] CloseHandle (hObject=0x504) returned 1
	[0069.056] GetCurrentThreadId () returned 0xf54
	[0069.056] FlushFileBuffers (hFile=0x500) returned 1
	[0069.101] CloseHandle (hObject=0x500) returned 1
	[0069.104] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___watermark.bmp") returned 64
	[0069.104] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___watermark.bmp")) returned 1
	[0069.104] free (_Block=0x31cf580) 
	[0069.104] RtlExitUserThread (Status=0x0) 

Thread:
	id = 119
	os_tid = 0xf78

	[0069.555] _alloca_probe () returned 0x40328a
	[0069.555] GetCurrentThreadId () returned 0xf78
	[0069.555] SetFileAttributesW (lpFileName="C:\\BOOTSECT.bak", dwFileAttributes=0x80) returned 1
	[0069.556] CreateFileW (lpFileName="C:\\BOOTSECT.bak" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x500
	[0069.556] GetFileSizeEx (in: hFile=0x500, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8192) returned 1
	[0069.556] CreateFileMappingA (hFile=0x500, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2000, lpName=0x0) returned 0x4f8
	[0069.556] MapViewOfFile (hFileMappingObject=0x4f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.558] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.558] CloseHandle (hObject=0x4f8) returned 1
	[0069.558] GetCurrentThreadId () returned 0xf78
	[0069.558] FlushFileBuffers (hFile=0x500) returned 1
	[0069.637] CloseHandle (hObject=0x500) returned 1
	[0069.639] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\coronaVi2022@protonmail.ch___BOOTSECT.bak") returned 44
	[0069.639] MoveFileW (lpExistingFileName="C:\\BOOTSECT.bak" (normalized: "c:\\bootsect.bak"), lpNewFileName="C:\\coronaVi2022@protonmail.ch___BOOTSECT.bak" (normalized: "c:\\coronavi2022@protonmail.ch___bootsect.bak")) returned 1
	[0069.640] free (_Block=0x31f56b0) 
	[0069.640] RtlExitUserThread (Status=0x0) 

Thread:
	id = 122
	os_tid = 0xf74

	[0069.642] _alloca_probe () returned 0x40328a
	[0069.642] GetCurrentThreadId () returned 0xf74
	[0069.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", dwFileAttributes=0x80) returned 1
	[0069.643] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x504
	[0069.643] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4136) returned 1
	[0069.643] CreateFileMappingA (hFile=0x504, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x102f, lpName=0x0) returned 0x508
	[0069.643] MapViewOfFile (hFileMappingObject=0x508, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.645] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.645] CloseHandle (hObject=0x508) returned 1
	[0069.645] GetCurrentThreadId () returned 0xf74
	[0069.645] FlushFileBuffers (hFile=0x504) returned 1
	[0069.651] CloseHandle (hObject=0x504) returned 1
	[0069.653] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___C2RHeartbeatConfig.xml") returned 109
	[0069.653] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavi2022@protonmail.ch___c2rheartbeatconfig.xml")) returned 1
	[0069.654] free (_Block=0x31f56b0) 
	[0069.654] RtlExitUserThread (Status=0x0) 

Thread:
	id = 123
	os_tid = 0x4e8

	[0069.650] _alloca_probe () returned 0x40328a
	[0069.650] GetCurrentThreadId () returned 0x4e8
	[0069.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 1
	[0069.653] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c
	[0069.653] GetFileSizeEx (in: hFile=0x50c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=4782) returned 1
	[0069.653] CreateFileMappingA (hFile=0x50c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12bb, lpName=0x0) returned 0x510
	[0069.654] MapViewOfFile (hFileMappingObject=0x510, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.656] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.656] CloseHandle (hObject=0x510) returned 1
	[0069.656] GetCurrentThreadId () returned 0x4e8
	[0069.656] FlushFileBuffers (hFile=0x50c) returned 1
	[0069.724] CloseHandle (hObject=0x50c) returned 1
	[0069.726] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___OfficeUpdateSchedule.xml") returned 111
	[0069.726] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavi2022@protonmail.ch___officeupdateschedule.xml")) returned 1
	[0069.726] free (_Block=0x31fc6e8) 
	[0069.727] RtlExitUserThread (Status=0x0) 

Thread:
	id = 124
	os_tid = 0xc20

	[0069.659] _alloca_probe () returned 0x40328a
	[0069.659] GetCurrentThreadId () returned 0xc20
	[0069.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", dwFileAttributes=0x80) returned 1
	[0069.660] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x504
	[0069.660] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4450) returned 1
	[0069.660] CreateFileMappingA (hFile=0x504, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1163, lpName=0x0) returned 0x514
	[0069.660] MapViewOfFile (hFileMappingObject=0x514, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0069.661] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0069.661] CloseHandle (hObject=0x514) returned 1
	[0069.662] GetCurrentThreadId () returned 0xc20
	[0069.662] FlushFileBuffers (hFile=0x504) returned 1
	[0069.664] CloseHandle (hObject=0x504) returned 1
	[0069.665] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___ServiceWatcherSchedule.xml") returned 113
	[0069.665] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavi2022@protonmail.ch___servicewatcherschedule.xml")) returned 1
	[0069.666] free (_Block=0x31f56b0) 
	[0069.666] RtlExitUserThread (Status=0x0) 

Thread:
	id = 125
	os_tid = 0xd08

	[0069.669] _alloca_probe () returned 0x40328a
	[0069.670] GetCurrentThreadId () returned 0xd08
	[0069.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", dwFileAttributes=0x80) returned 0
	[0069.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.675] free (_Block=0x31f56b0) 
	[0069.675] RtlExitUserThread (Status=0x0) 

Thread:
	id = 126
	os_tid = 0xef8

	[0069.682] _alloca_probe () returned 0x40328a
	[0069.683] GetCurrentThreadId () returned 0xef8
	[0069.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", dwFileAttributes=0x80) returned 0
	[0069.684] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.684] free (_Block=0x31ff700) 
	[0069.684] RtlExitUserThread (Status=0x0) 

Thread:
	id = 127
	os_tid = 0xf98

	[0069.709] _alloca_probe () returned 0x40328a
	[0069.710] GetCurrentThreadId () returned 0xf98
	[0069.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", dwFileAttributes=0x80) returned 0
	[0069.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.711] free (_Block=0x3205730) 
	[0069.711] RtlExitUserThread (Status=0x0) 

Thread:
	id = 128
	os_tid = 0xf88

	[0069.712] _alloca_probe () returned 0x40328a
	[0069.713] GetCurrentThreadId () returned 0xf88
	[0069.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", dwFileAttributes=0x80) returned 0
	[0069.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.713] free (_Block=0x3206738) 
	[0069.713] RtlExitUserThread (Status=0x0) 

Thread:
	id = 129
	os_tid = 0xfbc

	[0069.714] _alloca_probe () returned 0x40328a
	[0069.715] GetCurrentThreadId () returned 0xfbc
	[0069.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", dwFileAttributes=0x80) returned 0
	[0069.716] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.716] free (_Block=0x3205730) 
	[0069.716] RtlExitUserThread (Status=0x0) 

Thread:
	id = 130
	os_tid = 0xcb8

	[0069.732] _alloca_probe () returned 0x40328a
	[0069.733] GetCurrentThreadId () returned 0xcb8
	[0069.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", dwFileAttributes=0x80) returned 0
	[0069.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.733] free (_Block=0x3206738) 
	[0069.733] RtlExitUserThread (Status=0x0) 

Thread:
	id = 131
	os_tid = 0x440

	[0069.734] _alloca_probe () returned 0x40328a
	[0069.735] GetCurrentThreadId () returned 0x440
	[0069.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", dwFileAttributes=0x80) returned 0
	[0069.735] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.735] free (_Block=0x3205730) 
	[0069.735] RtlExitUserThread (Status=0x0) 

Thread:
	id = 132
	os_tid = 0xe84

	[0069.739] _alloca_probe () returned 0x40328a
	[0069.739] GetCurrentThreadId () returned 0xe84
	[0069.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", dwFileAttributes=0x80) returned 0
	[0069.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.740] free (_Block=0x3205730) 
	[0069.740] RtlExitUserThread (Status=0x0) 

Thread:
	id = 133
	os_tid = 0xea8

	[0069.741] _alloca_probe () returned 0x40328a
	[0069.741] GetCurrentThreadId () returned 0xea8
	[0069.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", dwFileAttributes=0x80) returned 0
	[0069.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.742] free (_Block=0x3205730) 
	[0069.742] RtlExitUserThread (Status=0x0) 

Thread:
	id = 134
	os_tid = 0xea0

	[0069.743] _alloca_probe () returned 0x40328a
	[0069.744] GetCurrentThreadId () returned 0xea0
	[0069.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", dwFileAttributes=0x80) returned 0
	[0069.744] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.744] free (_Block=0x3205730) 
	[0069.744] RtlExitUserThread (Status=0x0) 

Thread:
	id = 135
	os_tid = 0xe6c

	[0069.757] _alloca_probe () returned 0x40328a
	[0069.757] GetCurrentThreadId () returned 0xe6c
	[0069.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", dwFileAttributes=0x80) returned 0
	[0069.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.760] free (_Block=0x3209750) 
	[0069.760] RtlExitUserThread (Status=0x0) 

Thread:
	id = 136
	os_tid = 0x760

	[0069.789] _alloca_probe () returned 0x40328a
	[0069.789] GetCurrentThreadId () returned 0x760
	[0069.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", dwFileAttributes=0x80) returned 0
	[0069.790] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.790] free (_Block=0x320b760) 
	[0069.791] RtlExitUserThread (Status=0x0) 

Thread:
	id = 137
	os_tid = 0x53c

	[0069.792] _alloca_probe () returned 0x40328a
	[0069.793] GetCurrentThreadId () returned 0x53c
	[0069.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", dwFileAttributes=0x80) returned 0
	[0069.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.794] free (_Block=0x320b760) 
	[0069.794] RtlExitUserThread (Status=0x0) 

Thread:
	id = 138
	os_tid = 0x1200

	[0069.800] _alloca_probe () returned 0x40328a
	[0069.800] GetCurrentThreadId () returned 0x1200
	[0069.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", dwFileAttributes=0x80) returned 0
	[0069.803] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.804] free (_Block=0x320e778) 
	[0069.804] RtlExitUserThread (Status=0x0) 

Thread:
	id = 139
	os_tid = 0xf68

	[0069.805] _alloca_probe () returned 0x40328a
	[0069.806] GetCurrentThreadId () returned 0xf68
	[0069.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", dwFileAttributes=0x80) returned 0
	[0069.806] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.807] free (_Block=0x320e778) 
	[0069.807] RtlExitUserThread (Status=0x0) 

Thread:
	id = 140
	os_tid = 0xe98

	[0069.810] _alloca_probe () returned 0x40328a
	[0069.811] GetCurrentThreadId () returned 0xe98
	[0069.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", dwFileAttributes=0x80) returned 0
	[0069.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.812] free (_Block=0x320f780) 
	[0069.812] RtlExitUserThread (Status=0x0) 

Thread:
	id = 141
	os_tid = 0x900

	[0069.813] _alloca_probe () returned 0x40328a
	[0069.814] GetCurrentThreadId () returned 0x900
	[0069.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", dwFileAttributes=0x80) returned 0
	[0069.814] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.814] free (_Block=0x320f780) 
	[0069.814] RtlExitUserThread (Status=0x0) 

Thread:
	id = 142
	os_tid = 0x994

	[0069.816] _alloca_probe () returned 0x40328a
	[0069.816] GetCurrentThreadId () returned 0x994
	[0069.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", dwFileAttributes=0x80) returned 0
	[0069.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.817] free (_Block=0x320f780) 
	[0069.817] RtlExitUserThread (Status=0x0) 

Thread:
	id = 143
	os_tid = 0x13b0

	[0069.818] _alloca_probe () returned 0x40328a
	[0069.819] GetCurrentThreadId () returned 0x13b0
	[0069.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", dwFileAttributes=0x80) returned 0
	[0069.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.819] free (_Block=0x320f780) 
	[0069.819] RtlExitUserThread (Status=0x0) 

Thread:
	id = 144
	os_tid = 0xa50

	[0069.824] _alloca_probe () returned 0x40328a
	[0069.824] GetCurrentThreadId () returned 0xa50
	[0069.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", dwFileAttributes=0x80) returned 0
	[0069.824] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.825] free (_Block=0x320f780) 
	[0069.825] RtlExitUserThread (Status=0x0) 

Thread:
	id = 145
	os_tid = 0x13d8

	[0069.826] _alloca_probe () returned 0x40328a
	[0069.826] GetCurrentThreadId () returned 0x13d8
	[0069.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", dwFileAttributes=0x80) returned 0
	[0069.828] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.828] free (_Block=0x320f780) 
	[0069.828] RtlExitUserThread (Status=0x0) 

Thread:
	id = 146
	os_tid = 0x13fc

	[0069.830] _alloca_probe () returned 0x40328a
	[0069.830] GetCurrentThreadId () returned 0x13fc
	[0069.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", dwFileAttributes=0x80) returned 0
	[0069.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.831] free (_Block=0x320f780) 
	[0069.831] RtlExitUserThread (Status=0x0) 

Thread:
	id = 147
	os_tid = 0x13d4

	[0069.832] _alloca_probe () returned 0x40328a
	[0069.832] GetCurrentThreadId () returned 0x13d4
	[0069.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", dwFileAttributes=0x80) returned 0
	[0069.832] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.833] free (_Block=0x320f780) 
	[0069.833] RtlExitUserThread (Status=0x0) 

Thread:
	id = 148
	os_tid = 0x13f8

	[0069.834] _alloca_probe () returned 0x40328a
	[0069.834] GetCurrentThreadId () returned 0x13f8
	[0069.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", dwFileAttributes=0x80) returned 0
	[0069.835] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.835] free (_Block=0x320f780) 
	[0069.836] RtlExitUserThread (Status=0x0) 

Thread:
	id = 149
	os_tid = 0x13e8

	[0069.837] _alloca_probe () returned 0x40328a
	[0069.837] GetCurrentThreadId () returned 0x13e8
	[0069.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", dwFileAttributes=0x80) returned 0
	[0069.837] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.837] free (_Block=0x3210788) 
	[0069.838] RtlExitUserThread (Status=0x0) 

Thread:
	id = 150
	os_tid = 0x13f0

	[0069.839] _alloca_probe () returned 0x40328a
	[0069.839] GetCurrentThreadId () returned 0x13f0
	[0069.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", dwFileAttributes=0x80) returned 0
	[0069.839] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.840] free (_Block=0x320f780) 
	[0069.840] RtlExitUserThread (Status=0x0) 

Thread:
	id = 151
	os_tid = 0x13f4

	[0069.841] _alloca_probe () returned 0x40328a
	[0069.841] GetCurrentThreadId () returned 0x13f4
	[0069.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", dwFileAttributes=0x80) returned 0
	[0069.842] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.842] free (_Block=0x320f780) 
	[0069.842] RtlExitUserThread (Status=0x0) 

Thread:
	id = 152
	os_tid = 0x1130

	[0069.843] _alloca_probe () returned 0x40328a
	[0069.844] GetCurrentThreadId () returned 0x1130
	[0069.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", dwFileAttributes=0x80) returned 0
	[0069.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.844] free (_Block=0x3210788) 
	[0069.844] RtlExitUserThread (Status=0x0) 

Thread:
	id = 153
	os_tid = 0x13ec

	[0069.846] _alloca_probe () returned 0x40328a
	[0069.846] GetCurrentThreadId () returned 0x13ec
	[0069.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", dwFileAttributes=0x80) returned 0
	[0069.846] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.846] free (_Block=0x3210788) 
	[0069.846] RtlExitUserThread (Status=0x0) 

Thread:
	id = 154
	os_tid = 0x13c4

	[0069.848] _alloca_probe () returned 0x40328a
	[0069.848] GetCurrentThreadId () returned 0x13c4
	[0069.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", dwFileAttributes=0x80) returned 0
	[0069.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.849] free (_Block=0x3210788) 
	[0069.849] RtlExitUserThread (Status=0x0) 

Thread:
	id = 155
	os_tid = 0x13cc

	[0069.850] _alloca_probe () returned 0x40328a
	[0069.851] GetCurrentThreadId () returned 0x13cc
	[0069.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", dwFileAttributes=0x80) returned 0
	[0069.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.851] free (_Block=0x3211790) 
	[0069.851] RtlExitUserThread (Status=0x0) 

Thread:
	id = 156
	os_tid = 0x13d0

	[0069.853] _alloca_probe () returned 0x40328a
	[0069.853] GetCurrentThreadId () returned 0x13d0
	[0069.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", dwFileAttributes=0x80) returned 0
	[0069.854] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.854] free (_Block=0x3210788) 
	[0069.854] RtlExitUserThread (Status=0x0) 

Thread:
	id = 157
	os_tid = 0x13e0

	[0069.856] _alloca_probe () returned 0x40328a
	[0069.856] GetCurrentThreadId () returned 0x13e0
	[0069.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", dwFileAttributes=0x80) returned 0
	[0069.856] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.857] free (_Block=0x3210788) 
	[0069.857] RtlExitUserThread (Status=0x0) 

Thread:
	id = 158
	os_tid = 0x13e4

	[0069.930] _alloca_probe () returned 0x40328a
	[0069.930] GetCurrentThreadId () returned 0x13e4
	[0069.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", dwFileAttributes=0x80) returned 0
	[0069.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.946] free (_Block=0x3211790) 
	[0069.946] RtlExitUserThread (Status=0x0) 

Thread:
	id = 159
	os_tid = 0x13c8

	[0069.954] _alloca_probe () returned 0x40328a
	[0069.955] GetCurrentThreadId () returned 0x13c8
	[0069.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", dwFileAttributes=0x80) returned 0
	[0069.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.955] free (_Block=0x3211790) 
	[0069.955] RtlExitUserThread (Status=0x0) 

Thread:
	id = 160
	os_tid = 0x117c

	[0069.969] _alloca_probe () returned 0x40328a
	[0069.969] GetCurrentThreadId () returned 0x117c
	[0069.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", dwFileAttributes=0x80) returned 0
	[0069.970] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.970] free (_Block=0x3212798) 
	[0069.970] RtlExitUserThread (Status=0x0) 

Thread:
	id = 161
	os_tid = 0x13c0

	[0069.973] _alloca_probe () returned 0x40328a
	[0069.973] GetCurrentThreadId () returned 0x13c0
	[0069.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", dwFileAttributes=0x80) returned 0
	[0069.974] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.974] free (_Block=0x3212798) 
	[0069.974] RtlExitUserThread (Status=0x0) 

Thread:
	id = 162
	os_tid = 0x704

	[0069.978] _alloca_probe () returned 0x40328a
	[0069.979] GetCurrentThreadId () returned 0x704
	[0069.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", dwFileAttributes=0x80) returned 0
	[0069.979] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.979] free (_Block=0x32137a0) 
	[0069.979] RtlExitUserThread (Status=0x0) 

Thread:
	id = 163
	os_tid = 0x1190

	[0069.981] _alloca_probe () returned 0x40328a
	[0069.981] GetCurrentThreadId () returned 0x1190
	[0069.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", dwFileAttributes=0x80) returned 0
	[0069.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.982] free (_Block=0x32137a0) 
	[0069.982] RtlExitUserThread (Status=0x0) 

Thread:
	id = 164
	os_tid = 0x1198

	[0069.986] _alloca_probe () returned 0x40328a
	[0069.986] GetCurrentThreadId () returned 0x1198
	[0069.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", dwFileAttributes=0x80) returned 0
	[0069.987] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.987] free (_Block=0x32147a8) 
	[0069.987] RtlExitUserThread (Status=0x0) 

Thread:
	id = 165
	os_tid = 0x11ac

	[0069.989] _alloca_probe () returned 0x40328a
	[0069.989] GetCurrentThreadId () returned 0x11ac
	[0069.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", dwFileAttributes=0x80) returned 0
	[0069.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.989] free (_Block=0x32147a8) 
	[0069.989] RtlExitUserThread (Status=0x0) 

Thread:
	id = 166
	os_tid = 0x11a8

	[0069.993] _alloca_probe () returned 0x40328a
	[0069.994] GetCurrentThreadId () returned 0x11a8
	[0069.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", dwFileAttributes=0x80) returned 0
	[0069.994] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.994] free (_Block=0x32157b0) 
	[0069.994] RtlExitUserThread (Status=0x0) 

Thread:
	id = 167
	os_tid = 0xfac

	[0069.996] _alloca_probe () returned 0x40328a
	[0069.996] GetCurrentThreadId () returned 0xfac
	[0069.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", dwFileAttributes=0x80) returned 0
	[0069.996] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.996] free (_Block=0x32157b0) 
	[0069.996] RtlExitUserThread (Status=0x0) 

Thread:
	id = 168
	os_tid = 0xfc4

	[0070.002] _alloca_probe () returned 0x40328a
	[0070.003] GetCurrentThreadId () returned 0xfc4
	[0070.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", dwFileAttributes=0x80) returned 0
	[0070.003] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.003] free (_Block=0x32167b8) 
	[0070.003] RtlExitUserThread (Status=0x0) 

Thread:
	id = 169
	os_tid = 0xfd8

	[0070.005] _alloca_probe () returned 0x40328a
	[0070.005] GetCurrentThreadId () returned 0xfd8
	[0070.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", dwFileAttributes=0x80) returned 0
	[0070.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.006] free (_Block=0x32167b8) 
	[0070.006] RtlExitUserThread (Status=0x0) 

Thread:
	id = 170
	os_tid = 0xfec

	[0070.007] _alloca_probe () returned 0x40328a
	[0070.008] GetCurrentThreadId () returned 0xfec
	[0070.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", dwFileAttributes=0x80) returned 0
	[0070.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.008] free (_Block=0x32167b8) 
	[0070.008] RtlExitUserThread (Status=0x0) 

Thread:
	id = 171
	os_tid = 0xa10

	[0070.010] _alloca_probe () returned 0x40328a
	[0070.010] GetCurrentThreadId () returned 0xa10
	[0070.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", dwFileAttributes=0x80) returned 0
	[0070.011] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.011] free (_Block=0x32167b8) 
	[0070.011] RtlExitUserThread (Status=0x0) 

Thread:
	id = 172
	os_tid = 0xbf8

	[0070.025] _alloca_probe () returned 0x40328a
	[0070.025] GetCurrentThreadId () returned 0xbf8
	[0070.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", dwFileAttributes=0x80) returned 0
	[0070.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.027] free (_Block=0x321a7d8) 
	[0070.027] RtlExitUserThread (Status=0x0) 

Thread:
	id = 173
	os_tid = 0x1188

	[0070.058] _alloca_probe () returned 0x40328a
	[0070.059] GetCurrentThreadId () returned 0x1188
	[0070.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", dwFileAttributes=0x80) returned 0
	[0070.059] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.059] free (_Block=0x321a7d8) 
	[0070.059] RtlExitUserThread (Status=0x0) 

Thread:
	id = 174
	os_tid = 0xe8c

	[0070.061] _alloca_probe () returned 0x40328a
	[0070.061] GetCurrentThreadId () returned 0xe8c
	[0070.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", dwFileAttributes=0x80) returned 0
	[0070.062] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.062] free (_Block=0x321a7d8) 
	[0070.062] RtlExitUserThread (Status=0x0) 

Thread:
	id = 175
	os_tid = 0x11a0

	[0070.064] _alloca_probe () returned 0x40328a
	[0070.065] GetCurrentThreadId () returned 0x11a0
	[0070.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", dwFileAttributes=0x80) returned 0
	[0070.065] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.065] free (_Block=0x321a7d8) 
	[0070.065] RtlExitUserThread (Status=0x0) 

Thread:
	id = 176
	os_tid = 0x11b4

	[0070.066] _alloca_probe () returned 0x40328a
	[0070.067] GetCurrentThreadId () returned 0x11b4
	[0070.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", dwFileAttributes=0x80) returned 0
	[0070.068] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.068] free (_Block=0x321a7d8) 
	[0070.068] RtlExitUserThread (Status=0x0) 

Thread:
	id = 177
	os_tid = 0x1140

	[0070.069] _alloca_probe () returned 0x40328a
	[0070.070] GetCurrentThreadId () returned 0x1140
	[0070.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", dwFileAttributes=0x80) returned 0
	[0070.070] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.070] free (_Block=0x321b7e0) 
	[0070.070] RtlExitUserThread (Status=0x0) 

Thread:
	id = 178
	os_tid = 0x1184

	[0070.071] _alloca_probe () returned 0x40328a
	[0070.072] GetCurrentThreadId () returned 0x1184
	[0070.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", dwFileAttributes=0x80) returned 0
	[0070.072] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.072] free (_Block=0x321a7d8) 
	[0070.072] RtlExitUserThread (Status=0x0) 

Thread:
	id = 179
	os_tid = 0x1024

	[0070.074] _alloca_probe () returned 0x40328a
	[0070.074] GetCurrentThreadId () returned 0x1024
	[0070.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", dwFileAttributes=0x80) returned 0
	[0070.074] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.074] free (_Block=0x321a7d8) 
	[0070.075] RtlExitUserThread (Status=0x0) 

Thread:
	id = 180
	os_tid = 0x1020

	[0070.076] _alloca_probe () returned 0x40328a
	[0070.076] GetCurrentThreadId () returned 0x1020
	[0070.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", dwFileAttributes=0x80) returned 0
	[0070.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.078] free (_Block=0x321a7d8) 
	[0070.078] RtlExitUserThread (Status=0x0) 

Thread:
	id = 181
	os_tid = 0xd48

	[0070.081] _alloca_probe () returned 0x40328a
	[0070.081] GetCurrentThreadId () returned 0xd48
	[0070.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", dwFileAttributes=0x80) returned 0
	[0070.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.082] free (_Block=0x321b7e0) 
	[0070.082] RtlExitUserThread (Status=0x0) 

Thread:
	id = 182
	os_tid = 0x648

	[0070.083] _alloca_probe () returned 0x40328a
	[0070.084] GetCurrentThreadId () returned 0x648
	[0070.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", dwFileAttributes=0x80) returned 0
	[0070.084] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.084] free (_Block=0x321a7d8) 
	[0070.084] RtlExitUserThread (Status=0x0) 

Thread:
	id = 183
	os_tid = 0x1164

	[0070.086] _alloca_probe () returned 0x40328a
	[0070.086] GetCurrentThreadId () returned 0x1164
	[0070.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", dwFileAttributes=0x80) returned 0
	[0070.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.086] free (_Block=0x321a7d8) 
	[0070.086] RtlExitUserThread (Status=0x0) 

Thread:
	id = 184
	os_tid = 0xe78

	[0070.088] _alloca_probe () returned 0x40328a
	[0070.088] GetCurrentThreadId () returned 0xe78
	[0070.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", dwFileAttributes=0x80) returned 0
	[0070.089] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.089] free (_Block=0x321a7d8) 
	[0070.089] RtlExitUserThread (Status=0x0) 

Thread:
	id = 185
	os_tid = 0x101c

	[0070.091] _alloca_probe () returned 0x40328a
	[0070.091] GetCurrentThreadId () returned 0x101c
	[0070.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", dwFileAttributes=0x80) returned 0
	[0070.091] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.091] free (_Block=0x321b7e0) 
	[0070.091] RtlExitUserThread (Status=0x0) 

Thread:
	id = 186
	os_tid = 0xf8c

	[0070.093] _alloca_probe () returned 0x40328a
	[0070.093] GetCurrentThreadId () returned 0xf8c
	[0070.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", dwFileAttributes=0x80) returned 0
	[0070.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.093] free (_Block=0x321a7d8) 
	[0070.094] RtlExitUserThread (Status=0x0) 

Thread:
	id = 187
	os_tid = 0xeac

	[0070.095] _alloca_probe () returned 0x40328a
	[0070.096] GetCurrentThreadId () returned 0xeac
	[0070.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", dwFileAttributes=0x80) returned 0
	[0070.096] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.096] free (_Block=0x321a7d8) 
	[0070.096] RtlExitUserThread (Status=0x0) 

Thread:
	id = 188
	os_tid = 0x798

	[0070.097] _alloca_probe () returned 0x40328a
	[0070.098] GetCurrentThreadId () returned 0x798
	[0070.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", dwFileAttributes=0x80) returned 0
	[0070.098] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.098] free (_Block=0x321a7d8) 
	[0070.099] RtlExitUserThread (Status=0x0) 

Thread:
	id = 189
	os_tid = 0x112c

	[0070.100] _alloca_probe () returned 0x40328a
	[0070.100] GetCurrentThreadId () returned 0x112c
	[0070.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", dwFileAttributes=0x80) returned 0
	[0070.101] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.101] free (_Block=0x321a7d8) 
	[0070.101] RtlExitUserThread (Status=0x0) 

Thread:
	id = 190
	os_tid = 0x1320

	[0070.102] _alloca_probe () returned 0x40328a
	[0070.103] GetCurrentThreadId () returned 0x1320
	[0070.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", dwFileAttributes=0x80) returned 0
	[0070.103] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.103] free (_Block=0x321a7d8) 
	[0070.103] RtlExitUserThread (Status=0x0) 

Thread:
	id = 191
	os_tid = 0x13b4

	[0070.104] _alloca_probe () returned 0x40328a
	[0070.105] GetCurrentThreadId () returned 0x13b4
	[0070.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", dwFileAttributes=0x80) returned 0
	[0070.105] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.105] free (_Block=0x321a7d8) 
	[0070.105] RtlExitUserThread (Status=0x0) 

Thread:
	id = 192
	os_tid = 0x980

	[0070.107] _alloca_probe () returned 0x40328a
	[0070.107] GetCurrentThreadId () returned 0x980
	[0070.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", dwFileAttributes=0x80) returned 0
	[0070.108] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.108] free (_Block=0x321a7d8) 
	[0070.108] RtlExitUserThread (Status=0x0) 

Thread:
	id = 193
	os_tid = 0x1274

	[0070.109] _alloca_probe () returned 0x40328a
	[0070.110] GetCurrentThreadId () returned 0x1274
	[0070.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", dwFileAttributes=0x80) returned 0
	[0070.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.110] free (_Block=0x321a7d8) 
	[0070.110] RtlExitUserThread (Status=0x0) 

Thread:
	id = 194
	os_tid = 0x12a8

	[0070.112] _alloca_probe () returned 0x40328a
	[0070.112] GetCurrentThreadId () returned 0x12a8
	[0070.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", dwFileAttributes=0x80) returned 0
	[0070.112] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.113] free (_Block=0x321a7d8) 
	[0070.113] RtlExitUserThread (Status=0x0) 

Thread:
	id = 195
	os_tid = 0x1308

	[0070.114] _alloca_probe () returned 0x40328a
	[0070.114] GetCurrentThreadId () returned 0x1308
	[0070.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", dwFileAttributes=0x80) returned 0
	[0070.115] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.115] free (_Block=0x321a7d8) 
	[0070.115] RtlExitUserThread (Status=0x0) 

Thread:
	id = 196
	os_tid = 0x1338

	[0070.116] _alloca_probe () returned 0x40328a
	[0070.117] GetCurrentThreadId () returned 0x1338
	[0070.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", dwFileAttributes=0x80) returned 0
	[0070.117] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.118] free (_Block=0x321a7d8) 
	[0070.118] RtlExitUserThread (Status=0x0) 

Thread:
	id = 197
	os_tid = 0x1344

	[0070.119] _alloca_probe () returned 0x40328a
	[0070.119] GetCurrentThreadId () returned 0x1344
	[0070.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", dwFileAttributes=0x80) returned 0
	[0070.120] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.120] free (_Block=0x321b7e0) 
	[0070.120] RtlExitUserThread (Status=0x0) 

Thread:
	id = 198
	os_tid = 0xf44

	[0070.121] _alloca_probe () returned 0x40328a
	[0070.122] GetCurrentThreadId () returned 0xf44
	[0070.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", dwFileAttributes=0x80) returned 0
	[0070.122] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.122] free (_Block=0x321a7d8) 
	[0070.122] RtlExitUserThread (Status=0x0) 

Thread:
	id = 199
	os_tid = 0xd6c

	[0070.123] _alloca_probe () returned 0x40328a
	[0070.124] GetCurrentThreadId () returned 0xd6c
	[0070.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", dwFileAttributes=0x80) returned 0
	[0070.126] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.127] free (_Block=0x321a7d8) 
	[0070.127] RtlExitUserThread (Status=0x0) 

Thread:
	id = 200
	os_tid = 0xafc

	[0070.129] _alloca_probe () returned 0x40328a
	[0070.130] GetCurrentThreadId () returned 0xafc
	[0070.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", dwFileAttributes=0x80) returned 0
	[0070.130] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.131] free (_Block=0x321a7d8) 
	[0070.131] RtlExitUserThread (Status=0x0) 

Thread:
	id = 201
	os_tid = 0xdf8

	[0070.132] _alloca_probe () returned 0x40328a
	[0070.132] GetCurrentThreadId () returned 0xdf8
	[0070.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", dwFileAttributes=0x80) returned 0
	[0070.133] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.133] free (_Block=0x321a7d8) 
	[0070.133] RtlExitUserThread (Status=0x0) 

Thread:
	id = 202
	os_tid = 0x910

	[0070.244] _alloca_probe () returned 0x40328a
	[0070.245] GetCurrentThreadId () returned 0x910
	[0070.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", dwFileAttributes=0x80) returned 0
	[0070.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.247] free (_Block=0x32368b8) 
	[0070.247] RtlExitUserThread (Status=0x0) 

Thread:
	id = 203
	os_tid = 0x85c

	[0070.248] _alloca_probe () returned 0x40328a
	[0070.248] GetCurrentThreadId () returned 0x85c
	[0070.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", dwFileAttributes=0x80) returned 0
	[0070.250] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.250] free (_Block=0x32388c8) 
	[0070.250] RtlExitUserThread (Status=0x0) 

Thread:
	id = 204
	os_tid = 0x9d0

	[0070.251] _alloca_probe () returned 0x40328a
	[0070.252] GetCurrentThreadId () returned 0x9d0
	[0070.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", dwFileAttributes=0x80) returned 0
	[0070.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.254] free (_Block=0x32368b8) 
	[0070.254] RtlExitUserThread (Status=0x0) 

Thread:
	id = 205
	os_tid = 0xaac

	[0070.255] _alloca_probe () returned 0x40328a
	[0070.256] GetCurrentThreadId () returned 0xaac
	[0070.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", dwFileAttributes=0x80) returned 0
	[0070.259] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.259] free (_Block=0x32388c8) 
	[0070.259] RtlExitUserThread (Status=0x0) 

Thread:
	id = 206
	os_tid = 0xa94

	[0070.260] _alloca_probe () returned 0x40328a
	[0070.260] GetCurrentThreadId () returned 0xa94
	[0070.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", dwFileAttributes=0x80) returned 0
	[0070.261] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.261] free (_Block=0x32368b8) 
	[0070.261] RtlExitUserThread (Status=0x0) 

Thread:
	id = 207
	os_tid = 0x1404

	[0070.263] _alloca_probe () returned 0x40328a
	[0070.263] GetCurrentThreadId () returned 0x1404
	[0070.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", dwFileAttributes=0x80) returned 0
	[0070.264] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.264] free (_Block=0x32388c8) 
	[0070.264] RtlExitUserThread (Status=0x0) 

Thread:
	id = 208
	os_tid = 0x1408

	[0070.265] _alloca_probe () returned 0x40328a
	[0070.265] GetCurrentThreadId () returned 0x1408
	[0070.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", dwFileAttributes=0x80) returned 0
	[0070.266] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.266] free (_Block=0x32368b8) 
	[0070.266] RtlExitUserThread (Status=0x0) 

Thread:
	id = 209
	os_tid = 0x140c

	[0070.268] _alloca_probe () returned 0x40328a
	[0070.269] GetCurrentThreadId () returned 0x140c
	[0070.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", dwFileAttributes=0x80) returned 0
	[0070.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.270] free (_Block=0x32388c8) 
	[0070.270] RtlExitUserThread (Status=0x0) 

Thread:
	id = 210
	os_tid = 0x1410

	[0070.271] _alloca_probe () returned 0x40328a
	[0070.271] GetCurrentThreadId () returned 0x1410
	[0070.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", dwFileAttributes=0x80) returned 0
	[0070.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.272] free (_Block=0x32368b8) 
	[0070.272] RtlExitUserThread (Status=0x0) 

Thread:
	id = 211
	os_tid = 0x1414

	[0070.273] _alloca_probe () returned 0x40328a
	[0070.274] GetCurrentThreadId () returned 0x1414
	[0070.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", dwFileAttributes=0x80) returned 0
	[0070.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.275] free (_Block=0x32368b8) 
	[0070.275] RtlExitUserThread (Status=0x0) 

Thread:
	id = 212
	os_tid = 0x1418

	[0070.324] _alloca_probe () returned 0x40328a
	[0070.325] GetCurrentThreadId () returned 0x1418
	[0070.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x80) returned 0
	[0070.325] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.326] free (_Block=0x3241910) 
	[0070.326] RtlExitUserThread (Status=0x0) 

Thread:
	id = 213
	os_tid = 0x141c

	[0070.398] _alloca_probe () returned 0x40328a
	[0070.399] GetCurrentThreadId () returned 0x141c
	[0070.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", dwFileAttributes=0x80) returned 1
	[0070.399] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x674
	[0070.399] GetFileSizeEx (in: hFile=0x674, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1423) returned 1
	[0070.399] CreateFileMappingA (hFile=0x674, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x59d, lpName=0x0) returned 0x678
	[0070.399] MapViewOfFile (hFileMappingObject=0x678, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.442] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.443] CloseHandle (hObject=0x678) returned 1
	[0070.443] GetCurrentThreadId () returned 0x141c
	[0070.443] FlushFileBuffers (hFile=0x674) returned 1
	[0070.467] CloseHandle (hObject=0x674) returned 1
	[0070.469] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\coronaVi2022@protonmail.ch___Xusage.txt") returned 85
	[0070.469] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\coronaVi2022@protonmail.ch___Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\coronavi2022@protonmail.ch___xusage.txt")) returned 1
	[0070.473] free (_Block=0x32539a0) 
	[0070.473] RtlExitUserThread (Status=0x0) 

Thread:
	id = 214
	os_tid = 0x1420

	[0070.532] _alloca_probe () returned 0x40328a
	[0070.533] GetCurrentThreadId () returned 0x1420
	[0070.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x80) returned 1
	[0070.534] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x66c
	[0070.534] GetFileSizeEx (in: hFile=0x66c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=14156) returned 1
	[0070.534] CreateFileMappingA (hFile=0x66c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3757, lpName=0x0) returned 0x67c
	[0070.534] MapViewOfFile (hFileMappingObject=0x67c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.538] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.538] CloseHandle (hObject=0x67c) returned 1
	[0070.538] GetCurrentThreadId () returned 0x1420
	[0070.538] FlushFileBuffers (hFile=0x66c) returned 1
	[0071.623] CloseHandle (hObject=0x66c) returned 1
	[0071.626] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___ffjcext.zip") returned 86
	[0071.626] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___ffjcext.zip")) returned 1
	[0071.627] free (_Block=0x32599d0) 
	[0071.627] RtlExitUserThread (Status=0x0) 

Thread:
	id = 215
	os_tid = 0x1424

	[0070.542] _alloca_probe () returned 0x40328a
	[0070.543] GetCurrentThreadId () returned 0x1424
	[0070.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", dwFileAttributes=0x80) returned 1
	[0070.544] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x680
	[0070.544] GetFileSizeEx (in: hFile=0x680, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=8590) returned 1
	[0070.544] CreateFileMappingA (hFile=0x680, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x219b, lpName=0x0) returned 0x684
	[0070.544] MapViewOfFile (hFileMappingObject=0x684, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.546] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.547] CloseHandle (hObject=0x684) returned 1
	[0070.547] GetCurrentThreadId () returned 0x1424
	[0070.547] FlushFileBuffers (hFile=0x680) returned 1
	[0070.549] CloseHandle (hObject=0x680) returned 1
	[0070.551] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash.gif") returned 85
	[0070.551] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash.gif")) returned 1
	[0070.551] free (_Block=0x325a9d8) 
	[0070.551] RtlExitUserThread (Status=0x0) 

Thread:
	id = 216
	os_tid = 0x1428

	[0070.635] _alloca_probe () returned 0x40328a
	[0070.636] GetCurrentThreadId () returned 0x1428
	[0070.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", dwFileAttributes=0x80) returned 1
	[0070.637] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x684
	[0070.637] GetFileSizeEx (in: hFile=0x684, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=15276) returned 1
	[0070.637] CreateFileMappingA (hFile=0x684, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bb7, lpName=0x0) returned 0x688
	[0070.637] MapViewOfFile (hFileMappingObject=0x688, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.641] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.641] CloseHandle (hObject=0x688) returned 1
	[0070.641] GetCurrentThreadId () returned 0x1428
	[0070.641] FlushFileBuffers (hFile=0x684) returned 1
	[0070.644] CloseHandle (hObject=0x684) returned 1
	[0070.647] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash@2x.gif") returned 88
	[0070.647] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash@2x.gif")) returned 1
	[0070.647] free (_Block=0x325b9e0) 
	[0070.648] RtlExitUserThread (Status=0x0) 

Thread:
	id = 217
	os_tid = 0x1434

	[0070.642] _alloca_probe () returned 0x40328a
	[0070.643] GetCurrentThreadId () returned 0x1434
	[0070.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", dwFileAttributes=0x80) returned 1
	[0070.644] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68c
	[0070.644] GetFileSizeEx (in: hFile=0x68c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=7805) returned 1
	[0070.644] CreateFileMappingA (hFile=0x68c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e89, lpName=0x0) returned 0x690
	[0070.644] MapViewOfFile (hFileMappingObject=0x690, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.651] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.651] CloseHandle (hObject=0x690) returned 1
	[0070.651] GetCurrentThreadId () returned 0x1434
	[0070.651] FlushFileBuffers (hFile=0x68c) returned 1
	[0070.654] CloseHandle (hObject=0x68c) returned 1
	[0070.655] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11-lic.gif") returned 92
	[0070.655] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash_11-lic.gif")) returned 1
	[0070.656] free (_Block=0x325a9d8) 
	[0070.656] RtlExitUserThread (Status=0x0) 

Thread:
	id = 218
	os_tid = 0x1438

	[0070.657] _alloca_probe () returned 0x40328a
	[0070.657] GetCurrentThreadId () returned 0x1438
	[0070.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", dwFileAttributes=0x80) returned 1
	[0070.658] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x690
	[0070.658] GetFileSizeEx (in: hFile=0x690, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=12250) returned 1
	[0070.658] CreateFileMappingA (hFile=0x690, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2fe3, lpName=0x0) returned 0x684
	[0070.658] MapViewOfFile (hFileMappingObject=0x684, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.661] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.661] CloseHandle (hObject=0x684) returned 1
	[0070.661] GetCurrentThreadId () returned 0x1438
	[0070.661] FlushFileBuffers (hFile=0x690) returned 1
	[0070.663] CloseHandle (hObject=0x690) returned 1
	[0070.665] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11@2x-lic.gif") returned 95
	[0070.665] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash_11@2x-lic.gif")) returned 1
	[0070.665] free (_Block=0x325b9e0) 
	[0070.665] RtlExitUserThread (Status=0x0) 

Thread:
	id = 219
	os_tid = 0x143c

	[0070.683] _alloca_probe () returned 0x40328a
	[0070.683] GetCurrentThreadId () returned 0x143c
	[0070.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x80) returned 1
	[0070.683] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x694
	[0070.683] GetFileSizeEx (in: hFile=0x694, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=153) returned 1
	[0070.684] CreateFileMappingA (hFile=0x694, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x698
	[0070.684] MapViewOfFile (hFileMappingObject=0x698, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.684] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.684] CloseHandle (hObject=0x698) returned 1
	[0070.684] GetCurrentThreadId () returned 0x143c
	[0070.684] FlushFileBuffers (hFile=0x694) returned 1
	[0070.690] CloseHandle (hObject=0x694) returned 1
	[0070.692] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___invalid32x32.gif") returned 99
	[0070.692] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___invalid32x32.gif")) returned 1
	[0070.692] free (_Block=0x325e9f8) 
	[0070.692] RtlExitUserThread (Status=0x0) 

Thread:
	id = 220
	os_tid = 0x1440

	[0070.693] _alloca_probe () returned 0x40328a
	[0070.694] GetCurrentThreadId () returned 0x1440
	[0070.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0070.694] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x694
	[0070.694] GetFileSizeEx (in: hFile=0x694, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=165) returned 1
	[0070.694] CreateFileMappingA (hFile=0x694, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa9, lpName=0x0) returned 0x69c
	[0070.695] MapViewOfFile (hFileMappingObject=0x69c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.695] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.695] CloseHandle (hObject=0x69c) returned 1
	[0070.695] GetCurrentThreadId () returned 0x1440
	[0070.695] FlushFileBuffers (hFile=0x694) returned 1
	[0070.697] CloseHandle (hObject=0x694) returned 1
	[0070.698] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyDrop32x32.gif") returned 106
	[0070.698] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_copydrop32x32.gif")) returned 1
	[0070.699] free (_Block=0x325fa00) 
	[0070.699] RtlExitUserThread (Status=0x0) 

Thread:
	id = 221
	os_tid = 0x1444

	[0070.700] _alloca_probe () returned 0x40328a
	[0070.701] GetCurrentThreadId () returned 0x1444
	[0070.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0070.701] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x69c
	[0070.701] GetFileSizeEx (in: hFile=0x69c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=153) returned 1
	[0070.701] CreateFileMappingA (hFile=0x69c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x6a0
	[0070.701] MapViewOfFile (hFileMappingObject=0x6a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.702] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.702] CloseHandle (hObject=0x6a0) returned 1
	[0070.702] GetCurrentThreadId () returned 0x1444
	[0070.702] FlushFileBuffers (hFile=0x69c) returned 1
	[0070.703] CloseHandle (hObject=0x69c) returned 1
	[0070.705] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyNoDrop32x32.gif") returned 108
	[0070.705] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_copynodrop32x32.gif")) returned 1
	[0070.705] free (_Block=0x325e9f8) 
	[0070.705] RtlExitUserThread (Status=0x0) 

Thread:
	id = 222
	os_tid = 0x1448

	[0070.707] _alloca_probe () returned 0x40328a
	[0070.707] GetCurrentThreadId () returned 0x1448
	[0070.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0070.707] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a0
	[0070.707] GetFileSizeEx (in: hFile=0x6a0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=168) returned 1
	[0070.707] CreateFileMappingA (hFile=0x6a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaf, lpName=0x0) returned 0x6a4
	[0070.708] MapViewOfFile (hFileMappingObject=0x6a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.708] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.708] CloseHandle (hObject=0x6a4) returned 1
	[0070.708] GetCurrentThreadId () returned 0x1448
	[0070.708] FlushFileBuffers (hFile=0x6a0) returned 1
	[0070.710] CloseHandle (hObject=0x6a0) returned 1
	[0070.711] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkDrop32x32.gif") returned 106
	[0070.711] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_linkdrop32x32.gif")) returned 1
	[0070.712] free (_Block=0x325fa00) 
	[0070.712] RtlExitUserThread (Status=0x0) 

Thread:
	id = 223
	os_tid = 0x144c

	[0070.715] _alloca_probe () returned 0x40328a
	[0070.716] GetCurrentThreadId () returned 0x144c
	[0070.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0070.716] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a4
	[0070.716] GetFileSizeEx (in: hFile=0x6a4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=153) returned 1
	[0070.717] CreateFileMappingA (hFile=0x6a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x6a8
	[0070.717] MapViewOfFile (hFileMappingObject=0x6a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.717] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.717] CloseHandle (hObject=0x6a8) returned 1
	[0070.717] GetCurrentThreadId () returned 0x144c
	[0070.717] FlushFileBuffers (hFile=0x6a4) returned 1
	[0070.719] CloseHandle (hObject=0x6a4) returned 1
	[0070.720] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkNoDrop32x32.gif") returned 108
	[0070.720] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_linknodrop32x32.gif")) returned 1
	[0070.720] free (_Block=0x325e9f8) 
	[0070.720] RtlExitUserThread (Status=0x0) 

Thread:
	id = 224
	os_tid = 0x1450

	[0070.722] _alloca_probe () returned 0x40328a
	[0070.722] GetCurrentThreadId () returned 0x1450
	[0070.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0070.723] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a8
	[0070.723] GetFileSizeEx (in: hFile=0x6a8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=147) returned 1
	[0070.723] CreateFileMappingA (hFile=0x6a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x95, lpName=0x0) returned 0x6ac
	[0070.723] MapViewOfFile (hFileMappingObject=0x6ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.723] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.724] CloseHandle (hObject=0x6ac) returned 1
	[0070.724] GetCurrentThreadId () returned 0x1450
	[0070.724] FlushFileBuffers (hFile=0x6a8) returned 1
	[0070.725] CloseHandle (hObject=0x6a8) returned 1
	[0070.727] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveDrop32x32.gif") returned 106
	[0070.727] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_movedrop32x32.gif")) returned 1
	[0070.727] free (_Block=0x325fa00) 
	[0070.727] RtlExitUserThread (Status=0x0) 

Thread:
	id = 225
	os_tid = 0x1454

	[0070.729] _alloca_probe () returned 0x40328a
	[0070.729] GetCurrentThreadId () returned 0x1454
	[0070.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0070.730] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ac
	[0070.730] GetFileSizeEx (in: hFile=0x6ac, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=153) returned 1
	[0070.730] CreateFileMappingA (hFile=0x6ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x6b0
	[0070.730] MapViewOfFile (hFileMappingObject=0x6b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.730] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.730] CloseHandle (hObject=0x6b0) returned 1
	[0070.730] GetCurrentThreadId () returned 0x1454
	[0070.730] FlushFileBuffers (hFile=0x6ac) returned 1
	[0070.732] CloseHandle (hObject=0x6ac) returned 1
	[0070.733] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveNoDrop32x32.gif") returned 108
	[0070.733] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_movenodrop32x32.gif")) returned 1
	[0070.734] free (_Block=0x325e9f8) 
	[0070.734] RtlExitUserThread (Status=0x0) 

Thread:
	id = 226
	os_tid = 0x1458

	[0070.738] _alloca_probe () returned 0x40328a
	[0070.739] GetCurrentThreadId () returned 0x1458
	[0070.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", dwFileAttributes=0x80) returned 1
	[0070.740] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ac
	[0070.740] GetFileSizeEx (in: hFile=0x6ac, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=4226) returned 1
	[0070.740] CreateFileMappingA (hFile=0x6ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1083, lpName=0x0) returned 0x690
	[0070.740] MapViewOfFile (hFileMappingObject=0x690, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.741] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.741] CloseHandle (hObject=0x690) returned 1
	[0070.741] GetCurrentThreadId () returned 0x1458
	[0070.741] FlushFileBuffers (hFile=0x6ac) returned 1
	[0070.746] CloseHandle (hObject=0x6ac) returned 1
	[0070.748] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\coronaVi2022@protonmail.ch___jvm.hprof.txt") returned 81
	[0070.748] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\coronaVi2022@protonmail.ch___jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\coronavi2022@protonmail.ch___jvm.hprof.txt")) returned 1
	[0070.748] free (_Block=0x325fa00) 
	[0070.748] RtlExitUserThread (Status=0x0) 

Thread:
	id = 227
	os_tid = 0x145c

	[0070.758] _alloca_probe () returned 0x40328a
	[0070.758] GetCurrentThreadId () returned 0x145c
	[0070.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", dwFileAttributes=0x80) returned 1
	[0070.759] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b0
	[0070.759] GetFileSizeEx (in: hFile=0x6b0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=46) returned 1
	[0070.759] CreateFileMappingA (hFile=0x6b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b, lpName=0x0) returned 0x6ac
	[0070.759] MapViewOfFile (hFileMappingObject=0x6ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.759] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.760] CloseHandle (hObject=0x6ac) returned 1
	[0070.760] GetCurrentThreadId () returned 0x145c
	[0070.760] FlushFileBuffers (hFile=0x6b0) returned 1
	[0070.762] CloseHandle (hObject=0x6b0) returned 1
	[0070.763] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___README.txt") returned 74
	[0070.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavi2022@protonmail.ch___readme.txt")) returned 1
	[0070.764] free (_Block=0x3261a10) 
	[0070.764] RtlExitUserThread (Status=0x0) 

Thread:
	id = 228
	os_tid = 0x1460

	[0070.765] _alloca_probe () returned 0x40328a
	[0070.766] GetCurrentThreadId () returned 0x1460
	[0070.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x80) returned 1
	[0070.766] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ac
	[0070.766] GetFileSizeEx (in: hFile=0x6ac, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=63933) returned 1
	[0070.766] CreateFileMappingA (hFile=0x6ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf9c9, lpName=0x0) returned 0x690
	[0070.766] MapViewOfFile (hFileMappingObject=0x690, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.791] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.792] CloseHandle (hObject=0x690) returned 1
	[0070.792] GetCurrentThreadId () returned 0x1460
	[0070.792] FlushFileBuffers (hFile=0x6ac) returned 1
	[0071.772] CloseHandle (hObject=0x6ac) returned 1
	[0071.775] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 98
	[0071.775] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavi2022@protonmail.ch___thirdpartylicensereadme-javafx.txt")) returned 1
	[0071.776] free (_Block=0x3262a18) 
	[0071.776] RtlExitUserThread (Status=0x0) 

Thread:
	id = 229
	os_tid = 0x1464

	[0070.768] _alloca_probe () returned 0x40328a
	[0070.768] GetCurrentThreadId () returned 0x1464
	[0070.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x80) returned 1
	[0070.772] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b8
	[0070.772] GetFileSizeEx (in: hFile=0x6b8, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=145180) returned 1
	[0070.772] CreateFileMappingA (hFile=0x6b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23727, lpName=0x0) returned 0x6bc
	[0070.772] MapViewOfFile (hFileMappingObject=0x6bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33f0000
	[0070.814] UnmapViewOfFile (lpBaseAddress=0x33f0000) returned 1
	[0070.815] CloseHandle (hObject=0x6bc) returned 1
	[0070.815] GetCurrentThreadId () returned 0x1464
	[0070.815] FlushFileBuffers (hFile=0x6b8) returned 1
	[0071.726] CloseHandle (hObject=0x6b8) returned 1
	[0071.730] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME.txt") returned 91
	[0071.730] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavi2022@protonmail.ch___thirdpartylicensereadme.txt")) returned 1
	[0071.731] free (_Block=0x3261a10) 
	[0071.731] RtlExitUserThread (Status=0x0) 

Thread:
	id = 230
	os_tid = 0x1468

	[0070.821] _alloca_probe () returned 0x40328a
	[0070.821] GetCurrentThreadId () returned 0x1468
	[0070.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x80) returned 1
	[0070.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d0
	[0070.823] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=5944055) returned 1
	[0070.823] CreateFileMappingA (hFile=0x4d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5ab2fd, lpName=0x0) returned 0x690
	[0070.823] MapViewOfFile (hFileMappingObject=0x690, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3530000
	[0072.303] UnmapViewOfFile (lpBaseAddress=0x3530000) returned 1
	[0072.356] CloseHandle (hObject=0x690) returned 1
	[0072.356] GetCurrentThreadId () returned 0x1468
	[0072.356] FlushFileBuffers (hFile=0x4d0) returned 1
	[0072.365] CloseHandle (hObject=0x4d0) returned 1
	[0072.512] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___AppXManifest.xml") returned 79
	[0072.512] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\coronavi2022@protonmail.ch___appxmanifest.xml")) returned 1
	[0072.513] free (_Block=0x3263a20) 
	[0072.513] RtlExitUserThread (Status=0x0) 

Thread:
	id = 231
	os_tid = 0x146c

	[0070.869] _alloca_probe () returned 0x40328a
	[0070.870] GetCurrentThreadId () returned 0x146c
	[0070.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x80) returned 1
	[0070.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4
	[0070.971] GetFileSizeEx (in: hFile=0x6c4, lpFileSize=0x3c1ff5c | out: lpFileSize=0x3c1ff5c*=281) returned 1
	[0070.971] CreateFileMappingA (hFile=0x6c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x121, lpName=0x0) returned 0x6c8
	[0070.971] MapViewOfFile (hFileMappingObject=0x6c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0070.971] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0070.971] CloseHandle (hObject=0x6c8) returned 1
	[0070.971] GetCurrentThreadId () returned 0x146c
	[0070.971] FlushFileBuffers (hFile=0x6c4) returned 1
	[0071.021] CloseHandle (hObject=0x6c4) returned 1
	[0071.023] _swprintf (in: param_1=0x3c19f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___FileSystemMetadata.xml") returned 85
	[0071.023] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\coronavi2022@protonmail.ch___filesystemmetadata.xml")) returned 1
	[0071.023] free (_Block=0x3265a30) 
	[0071.023] RtlExitUserThread (Status=0x0) 

Thread:
	id = 232
	os_tid = 0x1470

	[0071.252] _alloca_probe () returned 0x40328a
	[0071.252] GetCurrentThreadId () returned 0x1470
	[0071.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", dwFileAttributes=0x80) returned 1
	[0071.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6cc
	[0071.253] GetFileSizeEx (in: hFile=0x6cc, lpFileSize=0x3c1ff5c | out: lpFileSize=0x3c1ff5c*=94467) returned 1
	[0071.253] CreateFileMappingA (hFile=0x6cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17105, lpName=0x0) returned 0x6d0
	[0071.253] MapViewOfFile (hFileMappingObject=0x6d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0071.688] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0071.689] CloseHandle (hObject=0x6d0) returned 1
	[0071.689] GetCurrentThreadId () returned 0x1470
	[0071.689] FlushFileBuffers (hFile=0x6cc) returned 1
	[0074.186] CloseHandle (hObject=0x6cc) returned 1
	[0074.190] _swprintf (in: param_1=0x3c19f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___OSPP.vbs") returned 80
	[0074.190] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___OSPP.vbs" (normalized: "c:\\program files\\microsoft office\\office16\\coronavi2022@protonmail.ch___ospp.vbs")) returned 1
	[0074.191] free (_Block=0x3266a38) 
	[0074.191] RtlExitUserThread (Status=0x0) 

Thread:
	id = 233
	os_tid = 0x1474

	[0071.278] _alloca_probe () returned 0x40328a
	[0071.279] GetCurrentThreadId () returned 0x1474
	[0071.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", dwFileAttributes=0x80) returned 1
	[0071.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d8
	[0071.279] GetFileSizeEx (in: hFile=0x6d8, lpFileSize=0x3d5ff5c | out: lpFileSize=0x3d5ff5c*=36336) returned 1
	[0071.279] CreateFileMappingA (hFile=0x6d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8df0, lpName=0x0) returned 0x6dc
	[0071.279] MapViewOfFile (hFileMappingObject=0x6dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3d60000
	[0071.679] UnmapViewOfFile (lpBaseAddress=0x3d60000) returned 1
	[0071.680] CloseHandle (hObject=0x6dc) returned 1
	[0071.680] GetCurrentThreadId () returned 0x1474
	[0071.680] FlushFileBuffers (hFile=0x6d8) returned 1
	[0071.776] CloseHandle (hObject=0x6d8) returned 1
	[0071.778] _swprintf (in: param_1=0x3d59f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___SLERROR.xml") returned 83
	[0071.778] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___SLERROR.xml" (normalized: "c:\\program files\\microsoft office\\office16\\coronavi2022@protonmail.ch___slerror.xml")) returned 1
	[0071.779] free (_Block=0x3267a40) 
	[0071.779] RtlExitUserThread (Status=0x0) 

Thread:
	id = 236
	os_tid = 0x1488

	[0072.678] _alloca_probe () returned 0x40328a
	[0072.678] GetCurrentThreadId () returned 0x1488
	[0072.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0072.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x690
	[0072.679] GetFileSizeEx (in: hFile=0x690, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=387356) returned 1
	[0072.679] CreateFileMappingA (hFile=0x690, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e927, lpName=0x0) returned 0x6d8
	[0072.679] MapViewOfFile (hFileMappingObject=0x6d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0072.751] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0072.754] CloseHandle (hObject=0x6d8) returned 1
	[0072.754] GetCurrentThreadId () returned 0x1488
	[0072.754] FlushFileBuffers (hFile=0x690) returned 1
	[0074.197] CloseHandle (hObject=0x690) returned 1
	[0074.206] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 133
	[0074.206] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.207] free (_Block=0x32599d0) 
	[0074.207] RtlExitUserThread (Status=0x0) 

Thread:
	id = 237
	os_tid = 0x148c

	[0072.686] _alloca_probe () returned 0x40328a
	[0072.687] GetCurrentThreadId () returned 0x148c
	[0072.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0072.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b8
	[0072.687] GetFileSizeEx (in: hFile=0x6b8, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=1533) returned 1
	[0072.687] CreateFileMappingA (hFile=0x6b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x609, lpName=0x0) returned 0x6d0
	[0072.687] MapViewOfFile (hFileMappingObject=0x6d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0072.694] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0072.694] CloseHandle (hObject=0x6d0) returned 1
	[0072.694] GetCurrentThreadId () returned 0x148c
	[0072.694] FlushFileBuffers (hFile=0x6b8) returned 1
	[0072.727] CloseHandle (hObject=0x6b8) returned 1
	[0072.729] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 133
	[0072.729] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0072.730] free (_Block=0x3267a40) 
	[0072.730] RtlExitUserThread (Status=0x0) 

Thread:
	id = 238
	os_tid = 0x1490

	[0072.762] _alloca_probe () returned 0x40328a
	[0072.763] GetCurrentThreadId () returned 0x1490
	[0072.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0072.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b8
	[0072.764] GetFileSizeEx (in: hFile=0x6b8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=800867) returned 1
	[0072.764] CreateFileMappingA (hFile=0x6b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3865, lpName=0x0) returned 0x6d0
	[0072.764] MapViewOfFile (hFileMappingObject=0x6d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0072.939] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0072.953] CloseHandle (hObject=0x6d0) returned 1
	[0072.953] GetCurrentThreadId () returned 0x1490
	[0072.953] FlushFileBuffers (hFile=0x6b8) returned 1
	[0074.284] CloseHandle (hObject=0x6b8) returned 1
	[0074.300] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 133
	[0074.301] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.301] free (_Block=0x3267a40) 
	[0074.301] RtlExitUserThread (Status=0x0) 

Thread:
	id = 239
	os_tid = 0x1494

	[0072.965] _alloca_probe () returned 0x40328a
	[0072.965] GetCurrentThreadId () returned 0x1494
	[0072.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0072.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc
	[0072.966] GetFileSizeEx (in: hFile=0x6dc, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=1261) returned 1
	[0072.966] CreateFileMappingA (hFile=0x6dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x66c
	[0072.966] MapViewOfFile (hFileMappingObject=0x66c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0072.967] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0072.967] CloseHandle (hObject=0x66c) returned 1
	[0072.967] GetCurrentThreadId () returned 0x1494
	[0072.967] FlushFileBuffers (hFile=0x6dc) returned 1
	[0072.971] CloseHandle (hObject=0x6dc) returned 1
	[0072.973] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 133
	[0072.973] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0072.974] free (_Block=0x3261a10) 
	[0072.974] RtlExitUserThread (Status=0x0) 

Thread:
	id = 240
	os_tid = 0x1498

	[0072.968] _alloca_probe () returned 0x40328a
	[0072.969] GetCurrentThreadId () returned 0x1498
	[0072.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0072.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e0
	[0072.970] GetFileSizeEx (in: hFile=0x6e0, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=496513) returned 1
	[0072.970] CreateFileMappingA (hFile=0x6e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0x6e4
	[0072.970] MapViewOfFile (hFileMappingObject=0x6e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3530000
	[0073.062] UnmapViewOfFile (lpBaseAddress=0x3530000) returned 1
	[0073.066] CloseHandle (hObject=0x6e4) returned 1
	[0073.066] GetCurrentThreadId () returned 0x1498
	[0073.066] FlushFileBuffers (hFile=0x6e0) returned 1
	[0074.263] CloseHandle (hObject=0x6e0) returned 1
	[0074.273] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 133
	[0074.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.274] free (_Block=0x3262a18) 
	[0074.274] RtlExitUserThread (Status=0x0) 

Thread:
	id = 241
	os_tid = 0x149c

	[0072.987] _alloca_probe () returned 0x40328a
	[0072.987] GetCurrentThreadId () returned 0x149c
	[0072.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0072.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8
	[0072.999] GetFileSizeEx (in: hFile=0x6e8, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=1261) returned 1
	[0072.999] CreateFileMappingA (hFile=0x6e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6ec
	[0072.999] MapViewOfFile (hFileMappingObject=0x6ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0073.023] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0073.023] CloseHandle (hObject=0x6ec) returned 1
	[0073.023] GetCurrentThreadId () returned 0x149c
	[0073.023] FlushFileBuffers (hFile=0x6e8) returned 1
	[0073.073] CloseHandle (hObject=0x6e8) returned 1
	[0073.075] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 133
	[0073.075] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0073.075] free (_Block=0x3261a10) 
	[0073.075] RtlExitUserThread (Status=0x0) 

Thread:
	id = 242
	os_tid = 0x14a0

	[0073.077] _alloca_probe () returned 0x40328a
	[0073.077] GetCurrentThreadId () returned 0x14a0
	[0073.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4
	[0073.078] GetFileSizeEx (in: hFile=0x6e4, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=253712) returned 1
	[0073.078] CreateFileMappingA (hFile=0x6e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x6ec
	[0073.079] MapViewOfFile (hFileMappingObject=0x6ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3530000
	[0073.124] UnmapViewOfFile (lpBaseAddress=0x3530000) returned 1
	[0073.126] CloseHandle (hObject=0x6ec) returned 1
	[0073.126] GetCurrentThreadId () returned 0x14a0
	[0073.126] FlushFileBuffers (hFile=0x6e4) returned 1
	[0073.130] CloseHandle (hObject=0x6e4) returned 1
	[0073.136] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 133
	[0073.136] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0073.136] free (_Block=0x3261a10) 
	[0073.136] RtlExitUserThread (Status=0x0) 

Thread:
	id = 243
	os_tid = 0x14a4

	[0073.091] _alloca_probe () returned 0x40328a
	[0073.092] GetCurrentThreadId () returned 0x14a4
	[0073.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f4
	[0073.104] GetFileSizeEx (in: hFile=0x6f4, lpFileSize=0x36aff5c | out: lpFileSize=0x36aff5c*=1261) returned 1
	[0073.104] CreateFileMappingA (hFile=0x6f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6f8
	[0073.104] MapViewOfFile (hFileMappingObject=0x6f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0073.127] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0073.128] CloseHandle (hObject=0x6f8) returned 1
	[0073.128] GetCurrentThreadId () returned 0x14a4
	[0073.128] FlushFileBuffers (hFile=0x6f4) returned 1
	[0073.137] CloseHandle (hObject=0x6f4) returned 1
	[0073.139] _swprintf (in: param_1=0x36a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 133
	[0073.139] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0073.139] free (_Block=0x3263a20) 
	[0073.139] RtlExitUserThread (Status=0x0) 

Thread:
	id = 244
	os_tid = 0x14a8

	[0073.141] _alloca_probe () returned 0x40328a
	[0073.141] GetCurrentThreadId () returned 0x14a8
	[0073.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4
	[0073.142] GetFileSizeEx (in: hFile=0x6e4, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=1124942) returned 1
	[0073.142] CreateFileMappingA (hFile=0x6e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a5b, lpName=0x0) returned 0x6f8
	[0073.142] MapViewOfFile (hFileMappingObject=0x6f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3530000
	[0073.334] UnmapViewOfFile (lpBaseAddress=0x3530000) returned 1
	[0073.343] CloseHandle (hObject=0x6f8) returned 1
	[0073.343] GetCurrentThreadId () returned 0x14a8
	[0073.343] FlushFileBuffers (hFile=0x6e4) returned 1
	[0074.223] CloseHandle (hObject=0x6e4) returned 1
	[0074.253] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 133
	[0074.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.255] free (_Block=0x3263a20) 
	[0074.255] RtlExitUserThread (Status=0x0) 

Thread:
	id = 245
	os_tid = 0x14ac

	[0073.149] _alloca_probe () returned 0x40328a
	[0073.150] GetCurrentThreadId () returned 0x14ac
	[0073.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6fc
	[0073.156] GetFileSizeEx (in: hFile=0x6fc, lpFileSize=0x378ff5c | out: lpFileSize=0x378ff5c*=19451) returned 1
	[0073.156] CreateFileMappingA (hFile=0x6fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c05, lpName=0x0) returned 0x700
	[0073.156] MapViewOfFile (hFileMappingObject=0x700, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0073.171] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0073.171] CloseHandle (hObject=0x700) returned 1
	[0073.171] GetCurrentThreadId () returned 0x14ac
	[0073.171] FlushFileBuffers (hFile=0x6fc) returned 1
	[0073.234] CloseHandle (hObject=0x6fc) returned 1
	[0073.237] _swprintf (in: param_1=0x3789f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 133
	[0073.237] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0073.284] free (_Block=0x3261a10) 
	[0073.284] RtlExitUserThread (Status=0x0) 

Thread:
	id = 246
	os_tid = 0x14b0

	[0073.360] _alloca_probe () returned 0x40328a
	[0073.361] GetCurrentThreadId () returned 0x14b0
	[0073.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6fc
	[0073.362] GetFileSizeEx (in: hFile=0x6fc, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=763363) returned 1
	[0073.362] CreateFileMappingA (hFile=0x6fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5e5, lpName=0x0) returned 0x700
	[0073.362] MapViewOfFile (hFileMappingObject=0x700, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3670000
	[0073.527] UnmapViewOfFile (lpBaseAddress=0x3670000) returned 1
	[0073.628] CloseHandle (hObject=0x700) returned 1
	[0073.628] GetCurrentThreadId () returned 0x14b0
	[0073.628] FlushFileBuffers (hFile=0x6fc) returned 1
	[0074.315] CloseHandle (hObject=0x6fc) returned 1
	[0074.329] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 133
	[0074.329] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.330] free (_Block=0x3261a10) 
	[0074.330] RtlExitUserThread (Status=0x0) 

Thread:
	id = 247
	os_tid = 0x14b4

	[0073.407] _alloca_probe () returned 0x40328a
	[0073.408] GetCurrentThreadId () returned 0x14b4
	[0073.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708
	[0073.409] GetFileSizeEx (in: hFile=0x708, lpFileSize=0x386ff5c | out: lpFileSize=0x386ff5c*=1261) returned 1
	[0073.409] CreateFileMappingA (hFile=0x708, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x70c
	[0073.409] MapViewOfFile (hFileMappingObject=0x70c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0073.452] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0073.452] CloseHandle (hObject=0x70c) returned 1
	[0073.452] GetCurrentThreadId () returned 0x14b4
	[0073.452] FlushFileBuffers (hFile=0x708) returned 1
	[0073.643] CloseHandle (hObject=0x708) returned 1
	[0073.646] _swprintf (in: param_1=0x3869f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 133
	[0073.646] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0073.646] free (_Block=0x3268c68) 
	[0073.988] RtlExitUserThread (Status=0x0) 

Thread:
	id = 248
	os_tid = 0x14b8

	[0073.454] _alloca_probe () returned 0x40328a
	[0073.454] GetCurrentThreadId () returned 0x14b8
	[0073.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x710
	[0073.455] GetFileSizeEx (in: hFile=0x710, lpFileSize=0x39aff5c | out: lpFileSize=0x39aff5c*=1261) returned 1
	[0073.455] CreateFileMappingA (hFile=0x710, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x714
	[0073.455] MapViewOfFile (hFileMappingObject=0x714, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0073.541] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0073.659] CloseHandle (hObject=0x714) returned 1
	[0073.659] GetCurrentThreadId () returned 0x14b8
	[0073.659] FlushFileBuffers (hFile=0x710) returned 1
	[0073.725] CloseHandle (hObject=0x710) returned 1
	[0073.726] _swprintf (in: param_1=0x39a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 133
	[0073.726] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0073.727] free (_Block=0x3269e90) 
	[0073.988] RtlExitUserThread (Status=0x0) 

Thread:
	id = 249
	os_tid = 0x14bc

	[0073.457] _alloca_probe () returned 0x40328a
	[0073.457] GetCurrentThreadId () returned 0x14bc
	[0073.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c
	[0073.458] GetFileSizeEx (in: hFile=0x71c, lpFileSize=0x3d1ff5c | out: lpFileSize=0x3d1ff5c*=2147) returned 1
	[0073.458] CreateFileMappingA (hFile=0x71c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x865, lpName=0x0) returned 0x720
	[0073.458] MapViewOfFile (hFileMappingObject=0x720, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0073.541] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0073.659] CloseHandle (hObject=0x720) returned 1
	[0073.659] GetCurrentThreadId () returned 0x14bc
	[0073.659] FlushFileBuffers (hFile=0x71c) returned 1
	[0073.716] CloseHandle (hObject=0x71c) returned 1
	[0073.718] _swprintf (in: param_1=0x3d19f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 133
	[0073.718] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0073.718] free (_Block=0x326b0b8) 
	[0073.989] RtlExitUserThread (Status=0x0) 

Thread:
	id = 250
	os_tid = 0x14c0

	[0073.460] _alloca_probe () returned 0x40328a
	[0073.461] GetCurrentThreadId () returned 0x14c0
	[0073.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728
	[0073.461] GetFileSizeEx (in: hFile=0x728, lpFileSize=0x3e1ff5c | out: lpFileSize=0x3e1ff5c*=2147) returned 1
	[0073.461] CreateFileMappingA (hFile=0x728, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x865, lpName=0x0) returned 0x72c
	[0073.462] MapViewOfFile (hFileMappingObject=0x72c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a40000
	[0073.540] UnmapViewOfFile (lpBaseAddress=0x3a40000) returned 1
	[0073.658] CloseHandle (hObject=0x72c) returned 1
	[0073.658] GetCurrentThreadId () returned 0x14c0
	[0073.658] FlushFileBuffers (hFile=0x728) returned 1
	[0073.703] CloseHandle (hObject=0x728) returned 1
	[0073.704] _swprintf (in: param_1=0x3e19f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 133
	[0073.704] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0073.716] free (_Block=0x326f210) 
	[0073.990] RtlExitUserThread (Status=0x0) 

Thread:
	id = 251
	os_tid = 0x14c4

	[0073.463] _alloca_probe () returned 0x40328a
	[0073.464] GetCurrentThreadId () returned 0x14c4
	[0073.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x734
	[0073.465] GetFileSizeEx (in: hFile=0x734, lpFileSize=0x3f1ff5c | out: lpFileSize=0x3f1ff5c*=215883) returned 1
	[0073.465] CreateFileMappingA (hFile=0x734, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b55, lpName=0x0) returned 0x738
	[0073.465] MapViewOfFile (hFileMappingObject=0x738, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a90000
	[0073.691] UnmapViewOfFile (lpBaseAddress=0x3a90000) returned 1
	[0073.693] CloseHandle (hObject=0x738) returned 1
	[0073.693] GetCurrentThreadId () returned 0x14c4
	[0073.693] FlushFileBuffers (hFile=0x734) returned 1
	[0073.719] CloseHandle (hObject=0x734) returned 1
	[0073.724] _swprintf (in: param_1=0x3f19f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 133
	[0073.724] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0073.725] free (_Block=0x3270438) 
	[0073.989] RtlExitUserThread (Status=0x0) 

Thread:
	id = 252
	os_tid = 0x14c8

	[0073.466] _alloca_probe () returned 0x40328a
	[0073.467] GetCurrentThreadId () returned 0x14c8
	[0073.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x740
	[0073.467] GetFileSizeEx (in: hFile=0x740, lpFileSize=0x405ff5c | out: lpFileSize=0x405ff5c*=1261) returned 1
	[0073.468] CreateFileMappingA (hFile=0x740, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x744
	[0073.468] MapViewOfFile (hFileMappingObject=0x744, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3ad0000
	[0073.534] UnmapViewOfFile (lpBaseAddress=0x3ad0000) returned 1
	[0073.657] CloseHandle (hObject=0x744) returned 1
	[0073.657] GetCurrentThreadId () returned 0x14c8
	[0073.657] FlushFileBuffers (hFile=0x740) returned 1
	[0073.696] CloseHandle (hObject=0x740) returned 1
	[0073.698] _swprintf (in: param_1=0x4059f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 133
	[0073.698] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0073.699] free (_Block=0x3273848) 
	[0073.990] RtlExitUserThread (Status=0x0) 

Thread:
	id = 253
	os_tid = 0x14d0

	[0073.992] _alloca_probe () returned 0x40328a
	[0073.992] GetCurrentThreadId () returned 0x14d0
	[0073.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0073.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x734
	[0073.994] GetFileSizeEx (in: hFile=0x734, lpFileSize=0x37aff5c | out: lpFileSize=0x37aff5c*=1261) returned 1
	[0073.994] CreateFileMappingA (hFile=0x734, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x71c
	[0073.994] MapViewOfFile (hFileMappingObject=0x71c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0073.995] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0073.995] CloseHandle (hObject=0x71c) returned 1
	[0073.995] GetCurrentThreadId () returned 0x14d0
	[0073.995] FlushFileBuffers (hFile=0x734) returned 1
	[0074.009] CloseHandle (hObject=0x734) returned 1
	[0074.011] _swprintf (in: param_1=0x37a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 133
	[0074.011] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0074.019] free (_Block=0x3274850) 
	[0074.019] RtlExitUserThread (Status=0x0) 

Thread:
	id = 254
	os_tid = 0x14d4

	[0074.001] _alloca_probe () returned 0x40328a
	[0074.001] GetCurrentThreadId () returned 0x14d4
	[0074.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728
	[0074.002] GetFileSizeEx (in: hFile=0x728, lpFileSize=0x38eff5c | out: lpFileSize=0x38eff5c*=343329) returned 1
	[0074.002] CreateFileMappingA (hFile=0x728, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0x740
	[0074.002] MapViewOfFile (hFileMappingObject=0x740, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x38f0000
	[0074.065] UnmapViewOfFile (lpBaseAddress=0x38f0000) returned 1
	[0074.068] CloseHandle (hObject=0x740) returned 1
	[0074.068] GetCurrentThreadId () returned 0x14d4
	[0074.068] FlushFileBuffers (hFile=0x728) returned 1
	[0074.071] CloseHandle (hObject=0x728) returned 1
	[0074.079] _swprintf (in: param_1=0x38e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 133
	[0074.079] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.079] free (_Block=0x3273848) 
	[0074.080] RtlExitUserThread (Status=0x0) 

Thread:
	id = 255
	os_tid = 0x14d8

	[0074.082] _alloca_probe () returned 0x40328a
	[0074.082] GetCurrentThreadId () returned 0x14d8
	[0074.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x740
	[0074.083] GetFileSizeEx (in: hFile=0x740, lpFileSize=0x37aff5c | out: lpFileSize=0x37aff5c*=14913) returned 1
	[0074.083] CreateFileMappingA (hFile=0x740, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0x734
	[0074.083] MapViewOfFile (hFileMappingObject=0x734, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0074.087] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0074.087] CloseHandle (hObject=0x734) returned 1
	[0074.087] GetCurrentThreadId () returned 0x14d8
	[0074.087] FlushFileBuffers (hFile=0x740) returned 1
	[0074.331] CloseHandle (hObject=0x740) returned 1
	[0074.332] _swprintf (in: param_1=0x37a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 133
	[0074.332] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0074.333] free (_Block=0x3277890) 
	[0074.333] RtlExitUserThread (Status=0x0) 

Thread:
	id = 256
	os_tid = 0x14dc

	[0074.088] _alloca_probe () returned 0x40328a
	[0074.088] GetCurrentThreadId () returned 0x14dc
	[0074.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x738
	[0074.089] GetFileSizeEx (in: hFile=0x738, lpFileSize=0x38eff5c | out: lpFileSize=0x38eff5c*=357349) returned 1
	[0074.089] CreateFileMappingA (hFile=0x738, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573e9, lpName=0x0) returned 0x714
	[0074.089] MapViewOfFile (hFileMappingObject=0x714, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x38f0000
	[0074.158] UnmapViewOfFile (lpBaseAddress=0x38f0000) returned 1
	[0074.161] CloseHandle (hObject=0x714) returned 1
	[0074.162] GetCurrentThreadId () returned 0x14dc
	[0074.162] FlushFileBuffers (hFile=0x738) returned 1
	[0074.484] CloseHandle (hObject=0x738) returned 1
	[0074.492] _swprintf (in: param_1=0x38e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 133
	[0074.492] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.492] free (_Block=0x3274878) 
	[0074.493] RtlExitUserThread (Status=0x0) 

Thread:
	id = 257
	os_tid = 0x14e0

	[0074.091] _alloca_probe () returned 0x40328a
	[0074.091] GetCurrentThreadId () returned 0x14e0
	[0074.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c
	[0074.092] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0x3d1ff5c | out: lpFileSize=0x3d1ff5c*=1261) returned 1
	[0074.092] CreateFileMappingA (hFile=0x72c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x744
	[0074.092] MapViewOfFile (hFileMappingObject=0x744, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0074.098] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0074.098] CloseHandle (hObject=0x744) returned 1
	[0074.098] GetCurrentThreadId () returned 0x14e0
	[0074.099] FlushFileBuffers (hFile=0x72c) returned 1
	[0074.117] CloseHandle (hObject=0x72c) returned 1
	[0074.118] _swprintf (in: param_1=0x3d19f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 133
	[0074.118] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0074.119] free (_Block=0x327c8b8) 
	[0074.119] RtlExitUserThread (Status=0x0) 

Thread:
	id = 258
	os_tid = 0x14e4

	[0074.168] _alloca_probe () returned 0x40328a
	[0074.168] GetCurrentThreadId () returned 0x14e4
	[0074.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c
	[0074.169] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0x3d1ff5c | out: lpFileSize=0x3d1ff5c*=65002) returned 1
	[0074.169] CreateFileMappingA (hFile=0x72c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfdf3, lpName=0x0) returned 0x744
	[0074.169] MapViewOfFile (hFileMappingObject=0x744, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0074.182] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0074.182] CloseHandle (hObject=0x744) returned 1
	[0074.183] GetCurrentThreadId () returned 0x14e4
	[0074.183] FlushFileBuffers (hFile=0x72c) returned 1
	[0074.480] CloseHandle (hObject=0x72c) returned 1
	[0074.482] _swprintf (in: param_1=0x3d19f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 133
	[0074.482] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.483] free (_Block=0x3275880) 
	[0074.483] RtlExitUserThread (Status=0x0) 

Thread:
	id = 259
	os_tid = 0x14f0

	[0074.465] _alloca_probe () returned 0x40328a
	[0074.465] GetCurrentThreadId () returned 0x14f0
	[0074.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6fc
	[0074.466] GetFileSizeEx (in: hFile=0x6fc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1261) returned 1
	[0074.466] CreateFileMappingA (hFile=0x6fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6b8
	[0074.466] MapViewOfFile (hFileMappingObject=0x6b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0074.467] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0074.468] CloseHandle (hObject=0x6b8) returned 1
	[0074.468] GetCurrentThreadId () returned 0x14f0
	[0074.468] FlushFileBuffers (hFile=0x6fc) returned 1
	[0074.470] CloseHandle (hObject=0x6fc) returned 1
	[0074.472] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 133
	[0074.472] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0074.473] free (_Block=0x327d8c0) 
	[0074.473] RtlExitUserThread (Status=0x0) 

Thread:
	id = 260
	os_tid = 0x14f4

	[0074.640] _alloca_probe () returned 0x40328a
	[0074.640] GetCurrentThreadId () returned 0x14f4
	[0074.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c
	[0074.642] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1261) returned 1
	[0074.642] CreateFileMappingA (hFile=0x72c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6fc
	[0074.642] MapViewOfFile (hFileMappingObject=0x6fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0074.643] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0074.643] CloseHandle (hObject=0x6fc) returned 1
	[0074.643] GetCurrentThreadId () returned 0x14f4
	[0074.643] FlushFileBuffers (hFile=0x72c) returned 1
	[0074.646] CloseHandle (hObject=0x72c) returned 1
	[0074.648] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 133
	[0074.648] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0074.649] free (_Block=0x3278898) 
	[0074.649] RtlExitUserThread (Status=0x0) 

Thread:
	id = 261
	os_tid = 0x14f8

	[0074.650] _alloca_probe () returned 0x40328a
	[0074.650] GetCurrentThreadId () returned 0x14f8
	[0074.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0074.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c
	[0074.651] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9216) returned 1
	[0074.651] CreateFileMappingA (hFile=0x72c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0x6b8
	[0074.651] MapViewOfFile (hFileMappingObject=0x6b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0074.653] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0074.653] CloseHandle (hObject=0x6b8) returned 1
	[0074.653] GetCurrentThreadId () returned 0x14f8
	[0074.653] FlushFileBuffers (hFile=0x72c) returned 1
	[0074.655] CloseHandle (hObject=0x72c) returned 1
	[0074.657] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 133
	[0074.657] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.658] free (_Block=0x32798a0) 
	[0074.658] RtlExitUserThread (Status=0x0) 

Thread:
	id = 262
	os_tid = 0x14fc

	[0075.067] _alloca_probe () returned 0x40328a
	[0075.068] GetCurrentThreadId () returned 0x14fc
	[0075.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b8
	[0075.068] GetFileSizeEx (in: hFile=0x6b8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1261) returned 1
	[0075.068] CreateFileMappingA (hFile=0x6b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6e0
	[0075.068] MapViewOfFile (hFileMappingObject=0x6e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0075.069] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0075.069] CloseHandle (hObject=0x6e0) returned 1
	[0075.070] GetCurrentThreadId () returned 0x14fc
	[0075.070] FlushFileBuffers (hFile=0x6b8) returned 1
	[0075.079] CloseHandle (hObject=0x6b8) returned 1
	[0075.081] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 133
	[0075.081] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.082] free (_Block=0x327b8b0) 
	[0075.082] RtlExitUserThread (Status=0x0) 

Thread:
	id = 263
	os_tid = 0x1508

	[0075.071] _alloca_probe () returned 0x40328a
	[0075.072] GetCurrentThreadId () returned 0x1508
	[0075.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4
	[0075.072] GetFileSizeEx (in: hFile=0x6e4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=399528) returned 1
	[0075.072] CreateFileMappingA (hFile=0x6e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618af, lpName=0x0) returned 0x690
	[0075.072] MapViewOfFile (hFileMappingObject=0x690, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0075.145] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0075.148] CloseHandle (hObject=0x690) returned 1
	[0075.148] GetCurrentThreadId () returned 0x1508
	[0075.148] FlushFileBuffers (hFile=0x6e4) returned 1
	[0075.151] CloseHandle (hObject=0x6e4) returned 1
	[0075.160] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 133
	[0075.160] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0075.161] free (_Block=0x32798a0) 
	[0075.161] RtlExitUserThread (Status=0x0) 

Thread:
	id = 264
	os_tid = 0x150c

	[0075.162] _alloca_probe () returned 0x40328a
	[0075.163] GetCurrentThreadId () returned 0x150c
	[0075.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x690
	[0075.163] GetFileSizeEx (in: hFile=0x690, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1261) returned 1
	[0075.163] CreateFileMappingA (hFile=0x690, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6b8
	[0075.163] MapViewOfFile (hFileMappingObject=0x6b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0075.165] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0075.165] CloseHandle (hObject=0x6b8) returned 1
	[0075.165] GetCurrentThreadId () returned 0x150c
	[0075.165] FlushFileBuffers (hFile=0x690) returned 1
	[0075.170] CloseHandle (hObject=0x690) returned 1
	[0075.172] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 133
	[0075.172] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.173] free (_Block=0x3277890) 
	[0075.173] RtlExitUserThread (Status=0x0) 

Thread:
	id = 265
	os_tid = 0x1510

	[0075.166] _alloca_probe () returned 0x40328a
	[0075.167] GetCurrentThreadId () returned 0x1510
	[0075.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6cc
	[0075.167] GetFileSizeEx (in: hFile=0x6cc, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=1450) returned 1
	[0075.167] CreateFileMappingA (hFile=0x6cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b3, lpName=0x0) returned 0x744
	[0075.167] MapViewOfFile (hFileMappingObject=0x744, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0075.169] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0075.169] CloseHandle (hObject=0x744) returned 1
	[0075.169] GetCurrentThreadId () returned 0x1510
	[0075.170] FlushFileBuffers (hFile=0x6cc) returned 1
	[0075.174] CloseHandle (hObject=0x6cc) returned 1
	[0075.176] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 133
	[0075.176] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0075.177] free (_Block=0x3278898) 
	[0075.177] RtlExitUserThread (Status=0x0) 

Thread:
	id = 266
	os_tid = 0x1514

	[0075.178] _alloca_probe () returned 0x40328a
	[0075.179] GetCurrentThreadId () returned 0x1514
	[0075.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x690
	[0075.179] GetFileSizeEx (in: hFile=0x690, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1261) returned 1
	[0075.179] CreateFileMappingA (hFile=0x690, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x744
	[0075.179] MapViewOfFile (hFileMappingObject=0x744, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0075.180] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0075.181] CloseHandle (hObject=0x744) returned 1
	[0075.181] GetCurrentThreadId () returned 0x1514
	[0075.181] FlushFileBuffers (hFile=0x690) returned 1
	[0075.184] CloseHandle (hObject=0x690) returned 1
	[0075.186] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 133
	[0075.186] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.186] free (_Block=0x3278898) 
	[0075.186] RtlExitUserThread (Status=0x0) 

Thread:
	id = 267
	os_tid = 0x1518

	[0075.259] _alloca_probe () returned 0x40328a
	[0075.260] GetCurrentThreadId () returned 0x1518
	[0075.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x744
	[0075.260] GetFileSizeEx (in: hFile=0x744, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3754) returned 1
	[0075.261] CreateFileMappingA (hFile=0x744, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xeb3, lpName=0x0) returned 0x708
	[0075.261] MapViewOfFile (hFileMappingObject=0x708, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0075.262] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0075.262] CloseHandle (hObject=0x708) returned 1
	[0075.262] GetCurrentThreadId () returned 0x1518
	[0075.262] FlushFileBuffers (hFile=0x744) returned 1
	[0075.266] CloseHandle (hObject=0x744) returned 1
	[0075.268] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 133
	[0075.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0075.269] free (_Block=0x327a8a8) 
	[0075.269] RtlExitUserThread (Status=0x0) 

Thread:
	id = 268
	os_tid = 0x151c

	[0075.264] _alloca_probe () returned 0x40328a
	[0075.265] GetCurrentThreadId () returned 0x151c
	[0075.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700
	[0075.265] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1261) returned 1
	[0075.265] CreateFileMappingA (hFile=0x700, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x748
	[0075.266] MapViewOfFile (hFileMappingObject=0x748, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0075.269] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0075.269] CloseHandle (hObject=0x748) returned 1
	[0075.269] GetCurrentThreadId () returned 0x151c
	[0075.269] FlushFileBuffers (hFile=0x700) returned 1
	[0075.272] CloseHandle (hObject=0x700) returned 1
	[0075.273] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 133
	[0075.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.274] free (_Block=0x3275880) 
	[0075.274] RtlExitUserThread (Status=0x0) 

Thread:
	id = 269
	os_tid = 0x1520

	[0075.364] _alloca_probe () returned 0x40328a
	[0075.365] GetCurrentThreadId () returned 0x1520
	[0075.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x748
	[0075.366] GetFileSizeEx (in: hFile=0x748, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1261) returned 1
	[0075.366] CreateFileMappingA (hFile=0x748, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x744
	[0075.366] MapViewOfFile (hFileMappingObject=0x744, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0075.367] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0075.367] CloseHandle (hObject=0x744) returned 1
	[0075.367] GetCurrentThreadId () returned 0x1520
	[0075.367] FlushFileBuffers (hFile=0x748) returned 1
	[0075.370] CloseHandle (hObject=0x748) returned 1
	[0075.372] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 133
	[0075.372] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.373] free (_Block=0x3277890) 
	[0075.373] RtlExitUserThread (Status=0x0) 

Thread:
	id = 270
	os_tid = 0x1528

	[0075.392] _alloca_probe () returned 0x40328a
	[0075.392] GetCurrentThreadId () returned 0x1528
	[0075.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x744
	[0075.393] GetFileSizeEx (in: hFile=0x744, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1261) returned 1
	[0075.393] CreateFileMappingA (hFile=0x744, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x74c
	[0075.393] MapViewOfFile (hFileMappingObject=0x74c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0075.395] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0075.395] CloseHandle (hObject=0x74c) returned 1
	[0075.395] GetCurrentThreadId () returned 0x1528
	[0075.395] FlushFileBuffers (hFile=0x744) returned 1
	[0075.399] CloseHandle (hObject=0x744) returned 1
	[0075.401] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 133
	[0075.401] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.402] free (_Block=0x327a8a8) 
	[0075.402] RtlExitUserThread (Status=0x0) 

Thread:
	id = 271
	os_tid = 0x152c

	[0075.397] _alloca_probe () returned 0x40328a
	[0075.398] GetCurrentThreadId () returned 0x152c
	[0075.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x750
	[0075.398] GetFileSizeEx (in: hFile=0x750, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=527958) returned 1
	[0075.398] CreateFileMappingA (hFile=0x750, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e5b, lpName=0x0) returned 0x754
	[0075.399] MapViewOfFile (hFileMappingObject=0x754, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0075.502] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0075.506] CloseHandle (hObject=0x754) returned 1
	[0075.506] GetCurrentThreadId () returned 0x152c
	[0075.506] FlushFileBuffers (hFile=0x750) returned 1
	[0076.033] CloseHandle (hObject=0x750) returned 1
	[0076.044] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 133
	[0076.044] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.045] free (_Block=0x3274878) 
	[0076.045] RtlExitUserThread (Status=0x0) 

Thread:
	id = 272
	os_tid = 0x1530

	[0075.448] _alloca_probe () returned 0x40328a
	[0075.449] GetCurrentThreadId () returned 0x1530
	[0075.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x758
	[0075.449] GetFileSizeEx (in: hFile=0x758, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1261) returned 1
	[0075.449] CreateFileMappingA (hFile=0x758, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x75c
	[0075.449] MapViewOfFile (hFileMappingObject=0x75c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0075.487] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0075.487] CloseHandle (hObject=0x75c) returned 1
	[0075.487] GetCurrentThreadId () returned 0x1530
	[0075.487] FlushFileBuffers (hFile=0x758) returned 1
	[0075.513] CloseHandle (hObject=0x758) returned 1
	[0075.515] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 133
	[0075.515] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.516] free (_Block=0x32798a0) 
	[0075.516] RtlExitUserThread (Status=0x0) 

Thread:
	id = 273
	os_tid = 0x1534

	[0075.518] _alloca_probe () returned 0x40328a
	[0075.519] GetCurrentThreadId () returned 0x1534
	[0075.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0075.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x754
	[0075.519] GetFileSizeEx (in: hFile=0x754, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3375) returned 1
	[0075.519] CreateFileMappingA (hFile=0x754, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd3d, lpName=0x0) returned 0x75c
	[0075.519] MapViewOfFile (hFileMappingObject=0x75c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0075.520] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0075.521] CloseHandle (hObject=0x75c) returned 1
	[0075.521] GetCurrentThreadId () returned 0x1534
	[0075.521] FlushFileBuffers (hFile=0x754) returned 1
	[0075.523] CloseHandle (hObject=0x754) returned 1
	[0075.525] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 133
	[0075.525] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0075.525] free (_Block=0x327b8b0) 
	[0075.525] RtlExitUserThread (Status=0x0) 

Thread:
	id = 274
	os_tid = 0x1538

	[0075.526] _alloca_probe () returned 0x40328a
	[0075.527] GetCurrentThreadId () returned 0x1538
	[0075.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", dwFileAttributes=0x80) returned 1
	[0075.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x75c
	[0075.527] GetFileSizeEx (in: hFile=0x75c, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=2173046) returned 1
	[0075.527] CreateFileMappingA (hFile=0x75c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x21287b, lpName=0x0) returned 0x760
	[0075.527] MapViewOfFile (hFileMappingObject=0x760, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33f0000
	[0075.889] UnmapViewOfFile (lpBaseAddress=0x33f0000) returned 1
	[0075.949] CloseHandle (hObject=0x760) returned 1
	[0075.949] GetCurrentThreadId () returned 0x1538
	[0075.949] FlushFileBuffers (hFile=0x75c) returned 1
	[0077.080] CloseHandle (hObject=0x75c) returned 1
	[0077.164] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 103
	[0077.164] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.common.xml")) returned 1
	[0077.164] free (_Block=0x327c8b8) 
	[0077.164] RtlExitUserThread (Status=0x0) 

Thread:
	id = 275
	os_tid = 0x153c

	[0075.540] _alloca_probe () returned 0x40328a
	[0075.541] GetCurrentThreadId () returned 0x153c
	[0075.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0075.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x768
	[0075.541] GetFileSizeEx (in: hFile=0x768, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9831) returned 1
	[0075.542] CreateFileMappingA (hFile=0x768, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x266d, lpName=0x0) returned 0x76c
	[0075.542] MapViewOfFile (hFileMappingObject=0x76c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0075.555] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0075.555] CloseHandle (hObject=0x76c) returned 1
	[0075.555] GetCurrentThreadId () returned 0x153c
	[0075.555] FlushFileBuffers (hFile=0x768) returned 1
	[0075.612] CloseHandle (hObject=0x768) returned 1
	[0075.614] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 105
	[0075.614] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0075.614] free (_Block=0x327a8a8) 
	[0075.614] RtlExitUserThread (Status=0x0) 

Thread:
	id = 276
	os_tid = 0x1540

	[0076.048] _alloca_probe () returned 0x40328a
	[0076.049] GetCurrentThreadId () returned 0x1540
	[0076.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0076.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x760
	[0076.050] GetFileSizeEx (in: hFile=0x760, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=373) returned 1
	[0076.050] CreateFileMappingA (hFile=0x760, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x179, lpName=0x0) returned 0x768
	[0076.050] MapViewOfFile (hFileMappingObject=0x768, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0076.050] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0076.050] CloseHandle (hObject=0x768) returned 1
	[0076.050] GetCurrentThreadId () returned 0x1540
	[0076.050] FlushFileBuffers (hFile=0x760) returned 1
	[0076.052] CloseHandle (hObject=0x760) returned 1
	[0076.054] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 102
	[0076.054] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0076.055] free (_Block=0x3275880) 
	[0076.055] RtlExitUserThread (Status=0x0) 

Thread:
	id = 277
	os_tid = 0x1544

	[0076.056] _alloca_probe () returned 0x40328a
	[0076.056] GetCurrentThreadId () returned 0x1544
	[0076.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x768
	[0076.057] GetFileSizeEx (in: hFile=0x768, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=387367) returned 1
	[0076.057] CreateFileMappingA (hFile=0x768, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e92d, lpName=0x0) returned 0x76c
	[0076.061] MapViewOfFile (hFileMappingObject=0x76c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0076.125] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0076.129] CloseHandle (hObject=0x76c) returned 1
	[0076.129] GetCurrentThreadId () returned 0x1544
	[0076.129] FlushFileBuffers (hFile=0x768) returned 1
	[0076.131] CloseHandle (hObject=0x768) returned 1
	[0076.139] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 162
	[0076.139] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.139] free (_Block=0x3277890) 
	[0076.139] RtlExitUserThread (Status=0x0) 

Thread:
	id = 278
	os_tid = 0x1548

	[0076.141] _alloca_probe () returned 0x40328a
	[0076.142] GetCurrentThreadId () returned 0x1548
	[0076.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x76c
	[0076.142] GetFileSizeEx (in: hFile=0x76c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1545) returned 1
	[0076.143] CreateFileMappingA (hFile=0x76c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x611, lpName=0x0) returned 0x770
	[0076.143] MapViewOfFile (hFileMappingObject=0x770, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0076.144] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0076.144] CloseHandle (hObject=0x770) returned 1
	[0076.144] GetCurrentThreadId () returned 0x1548
	[0076.144] FlushFileBuffers (hFile=0x76c) returned 1
	[0076.149] CloseHandle (hObject=0x76c) returned 1
	[0076.151] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 162
	[0076.151] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.152] free (_Block=0x32798a0) 
	[0076.152] RtlExitUserThread (Status=0x0) 

Thread:
	id = 279
	os_tid = 0x154c

	[0076.159] _alloca_probe () returned 0x40328a
	[0076.160] GetCurrentThreadId () returned 0x154c
	[0076.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x770
	[0076.160] GetFileSizeEx (in: hFile=0x770, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=800869) returned 1
	[0076.160] CreateFileMappingA (hFile=0x770, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3869, lpName=0x0) returned 0x774
	[0076.167] MapViewOfFile (hFileMappingObject=0x774, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0076.302] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0076.311] CloseHandle (hObject=0x774) returned 1
	[0076.311] GetCurrentThreadId () returned 0x154c
	[0076.311] FlushFileBuffers (hFile=0x770) returned 1
	[0076.313] CloseHandle (hObject=0x770) returned 1
	[0076.330] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 162
	[0076.330] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.331] free (_Block=0x327a8a8) 
	[0076.331] RtlExitUserThread (Status=0x0) 

Thread:
	id = 280
	os_tid = 0x1550

	[0076.334] _alloca_probe () returned 0x40328a
	[0076.334] GetCurrentThreadId () returned 0x1550
	[0076.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774
	[0076.335] GetFileSizeEx (in: hFile=0x774, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0076.335] CreateFileMappingA (hFile=0x774, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x778
	[0076.336] MapViewOfFile (hFileMappingObject=0x778, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0076.336] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0076.336] CloseHandle (hObject=0x778) returned 1
	[0076.337] GetCurrentThreadId () returned 0x1550
	[0076.337] FlushFileBuffers (hFile=0x774) returned 1
	[0076.338] CloseHandle (hObject=0x774) returned 1
	[0076.340] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 162
	[0076.340] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.341] free (_Block=0x3278898) 
	[0076.341] RtlExitUserThread (Status=0x0) 

Thread:
	id = 281
	os_tid = 0x1554

	[0076.343] _alloca_probe () returned 0x40328a
	[0076.343] GetCurrentThreadId () returned 0x1554
	[0076.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x778
	[0076.344] GetFileSizeEx (in: hFile=0x778, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=496513) returned 1
	[0076.344] CreateFileMappingA (hFile=0x778, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0x77c
	[0076.347] MapViewOfFile (hFileMappingObject=0x77c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0076.427] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0076.431] CloseHandle (hObject=0x77c) returned 1
	[0076.431] GetCurrentThreadId () returned 0x1554
	[0076.431] FlushFileBuffers (hFile=0x778) returned 1
	[0076.433] CloseHandle (hObject=0x778) returned 1
	[0076.443] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 162
	[0076.443] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.443] free (_Block=0x3276888) 
	[0076.443] RtlExitUserThread (Status=0x0) 

Thread:
	id = 282
	os_tid = 0x1558

	[0076.446] _alloca_probe () returned 0x40328a
	[0076.447] GetCurrentThreadId () returned 0x1558
	[0076.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x77c
	[0076.447] GetFileSizeEx (in: hFile=0x77c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0076.447] CreateFileMappingA (hFile=0x77c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x780
	[0076.449] MapViewOfFile (hFileMappingObject=0x780, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0076.450] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0076.450] CloseHandle (hObject=0x780) returned 1
	[0076.450] GetCurrentThreadId () returned 0x1558
	[0076.450] FlushFileBuffers (hFile=0x77c) returned 1
	[0076.452] CloseHandle (hObject=0x77c) returned 1
	[0076.453] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 162
	[0076.453] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.458] free (_Block=0x327a8a8) 
	[0076.458] RtlExitUserThread (Status=0x0) 

Thread:
	id = 283
	os_tid = 0x155c

	[0076.460] _alloca_probe () returned 0x40328a
	[0076.461] GetCurrentThreadId () returned 0x155c
	[0076.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x780
	[0076.461] GetFileSizeEx (in: hFile=0x780, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=253712) returned 1
	[0076.461] CreateFileMappingA (hFile=0x780, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x784
	[0076.463] MapViewOfFile (hFileMappingObject=0x784, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0076.506] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0076.508] CloseHandle (hObject=0x784) returned 1
	[0076.509] GetCurrentThreadId () returned 0x155c
	[0076.509] FlushFileBuffers (hFile=0x780) returned 1
	[0076.512] CloseHandle (hObject=0x780) returned 1
	[0076.517] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 162
	[0076.517] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.518] free (_Block=0x3275880) 
	[0076.518] RtlExitUserThread (Status=0x0) 

Thread:
	id = 284
	os_tid = 0x1560

	[0076.520] _alloca_probe () returned 0x40328a
	[0076.521] GetCurrentThreadId () returned 0x1560
	[0076.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x784
	[0076.521] GetFileSizeEx (in: hFile=0x784, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0076.521] CreateFileMappingA (hFile=0x784, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x788
	[0076.522] MapViewOfFile (hFileMappingObject=0x788, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0076.523] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0076.523] CloseHandle (hObject=0x788) returned 1
	[0076.523] GetCurrentThreadId () returned 0x1560
	[0076.523] FlushFileBuffers (hFile=0x784) returned 1
	[0076.524] CloseHandle (hObject=0x784) returned 1
	[0076.526] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 162
	[0076.526] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.526] free (_Block=0x3274878) 
	[0076.526] RtlExitUserThread (Status=0x0) 

Thread:
	id = 285
	os_tid = 0x1564

	[0076.528] _alloca_probe () returned 0x40328a
	[0076.528] GetCurrentThreadId () returned 0x1564
	[0076.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x788
	[0076.529] GetFileSizeEx (in: hFile=0x788, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1124955) returned 1
	[0076.529] CreateFileMappingA (hFile=0x788, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a65, lpName=0x0) returned 0x78c
	[0076.530] MapViewOfFile (hFileMappingObject=0x78c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0076.714] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0076.723] CloseHandle (hObject=0x78c) returned 1
	[0076.723] GetCurrentThreadId () returned 0x1564
	[0076.723] FlushFileBuffers (hFile=0x788) returned 1
	[0076.726] CloseHandle (hObject=0x788) returned 1
	[0076.750] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 162
	[0076.750] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.751] free (_Block=0x327a8a8) 
	[0076.751] RtlExitUserThread (Status=0x0) 

Thread:
	id = 286
	os_tid = 0x1568

	[0076.794] _alloca_probe () returned 0x40328a
	[0076.794] GetCurrentThreadId () returned 0x1568
	[0076.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0076.795] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=19461) returned 1
	[0076.795] CreateFileMappingA (hFile=0x78c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c09, lpName=0x0) returned 0x790
	[0076.795] MapViewOfFile (hFileMappingObject=0x790, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0076.799] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0076.799] CloseHandle (hObject=0x790) returned 1
	[0076.799] GetCurrentThreadId () returned 0x1568
	[0076.799] FlushFileBuffers (hFile=0x78c) returned 1
	[0076.801] CloseHandle (hObject=0x78c) returned 1
	[0076.804] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 162
	[0076.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.804] free (_Block=0x3278898) 
	[0076.804] RtlExitUserThread (Status=0x0) 

Thread:
	id = 287
	os_tid = 0x156c

	[0076.806] _alloca_probe () returned 0x40328a
	[0076.807] GetCurrentThreadId () returned 0x156c
	[0076.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0076.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x790
	[0076.807] GetFileSizeEx (in: hFile=0x790, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=763365) returned 1
	[0076.807] CreateFileMappingA (hFile=0x790, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5e9, lpName=0x0) returned 0x794
	[0076.813] MapViewOfFile (hFileMappingObject=0x794, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0076.989] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0076.996] CloseHandle (hObject=0x794) returned 1
	[0076.996] GetCurrentThreadId () returned 0x156c
	[0076.996] FlushFileBuffers (hFile=0x790) returned 1
	[0076.999] CloseHandle (hObject=0x790) returned 1
	[0077.015] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 162
	[0077.015] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.016] free (_Block=0x3277890) 
	[0077.016] RtlExitUserThread (Status=0x0) 

Thread:
	id = 288
	os_tid = 0x1570

	[0077.018] _alloca_probe () returned 0x40328a
	[0077.019] GetCurrentThreadId () returned 0x1570
	[0077.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x794
	[0077.019] GetFileSizeEx (in: hFile=0x794, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0077.019] CreateFileMappingA (hFile=0x794, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x798
	[0077.020] MapViewOfFile (hFileMappingObject=0x798, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.021] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.021] CloseHandle (hObject=0x798) returned 1
	[0077.021] GetCurrentThreadId () returned 0x1570
	[0077.021] FlushFileBuffers (hFile=0x794) returned 1
	[0077.023] CloseHandle (hObject=0x794) returned 1
	[0077.025] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 162
	[0077.025] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.026] free (_Block=0x327b8b0) 
	[0077.026] RtlExitUserThread (Status=0x0) 

Thread:
	id = 289
	os_tid = 0x1574

	[0077.027] _alloca_probe () returned 0x40328a
	[0077.028] GetCurrentThreadId () returned 0x1574
	[0077.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x794
	[0077.028] GetFileSizeEx (in: hFile=0x794, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1273) returned 1
	[0077.028] CreateFileMappingA (hFile=0x794, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x79c
	[0077.029] MapViewOfFile (hFileMappingObject=0x79c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0077.030] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0077.030] CloseHandle (hObject=0x79c) returned 1
	[0077.030] GetCurrentThreadId () returned 0x1574
	[0077.030] FlushFileBuffers (hFile=0x794) returned 1
	[0077.038] CloseHandle (hObject=0x794) returned 1
	[0077.039] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 162
	[0077.039] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.040] free (_Block=0x3277890) 
	[0077.040] RtlExitUserThread (Status=0x0) 

Thread:
	id = 290
	os_tid = 0x1578

	[0077.034] _alloca_probe () returned 0x40328a
	[0077.034] GetCurrentThreadId () returned 0x1578
	[0077.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a0
	[0077.035] GetFileSizeEx (in: hFile=0x7a0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2149) returned 1
	[0077.035] CreateFileMappingA (hFile=0x7a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x869, lpName=0x0) returned 0x7a4
	[0077.035] MapViewOfFile (hFileMappingObject=0x7a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.037] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.037] CloseHandle (hObject=0x7a4) returned 1
	[0077.037] GetCurrentThreadId () returned 0x1578
	[0077.037] FlushFileBuffers (hFile=0x7a0) returned 1
	[0077.041] CloseHandle (hObject=0x7a0) returned 1
	[0077.042] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 162
	[0077.043] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0077.043] free (_Block=0x3278898) 
	[0077.043] RtlExitUserThread (Status=0x0) 

Thread:
	id = 291
	os_tid = 0x157c

	[0077.046] _alloca_probe () returned 0x40328a
	[0077.047] GetCurrentThreadId () returned 0x157c
	[0077.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x794
	[0077.047] GetFileSizeEx (in: hFile=0x794, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2149) returned 1
	[0077.047] CreateFileMappingA (hFile=0x794, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x869, lpName=0x0) returned 0x7a4
	[0077.048] MapViewOfFile (hFileMappingObject=0x7a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.049] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.049] CloseHandle (hObject=0x7a4) returned 1
	[0077.049] GetCurrentThreadId () returned 0x157c
	[0077.049] FlushFileBuffers (hFile=0x794) returned 1
	[0077.051] CloseHandle (hObject=0x794) returned 1
	[0077.052] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 162
	[0077.052] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0077.053] free (_Block=0x3277890) 
	[0077.053] RtlExitUserThread (Status=0x0) 

Thread:
	id = 292
	os_tid = 0x1580

	[0077.317] _alloca_probe () returned 0x40328a
	[0077.317] GetCurrentThreadId () returned 0x1580
	[0077.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x794
	[0077.318] GetFileSizeEx (in: hFile=0x794, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=215893) returned 1
	[0077.318] CreateFileMappingA (hFile=0x794, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b59, lpName=0x0) returned 0x7a4
	[0077.320] MapViewOfFile (hFileMappingObject=0x7a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0077.357] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0077.358] CloseHandle (hObject=0x7a4) returned 1
	[0077.358] GetCurrentThreadId () returned 0x1580
	[0077.358] FlushFileBuffers (hFile=0x794) returned 1
	[0077.362] CloseHandle (hObject=0x794) returned 1
	[0077.367] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 162
	[0077.367] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.368] free (_Block=0x3277890) 
	[0077.368] RtlExitUserThread (Status=0x0) 

Thread:
	id = 293
	os_tid = 0x1584

	[0077.420] _alloca_probe () returned 0x40328a
	[0077.420] GetCurrentThreadId () returned 0x1584
	[0077.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a4
	[0077.421] GetFileSizeEx (in: hFile=0x7a4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1273) returned 1
	[0077.421] CreateFileMappingA (hFile=0x7a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7a8
	[0077.422] MapViewOfFile (hFileMappingObject=0x7a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0077.423] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0077.423] CloseHandle (hObject=0x7a8) returned 1
	[0077.423] GetCurrentThreadId () returned 0x1584
	[0077.423] FlushFileBuffers (hFile=0x7a4) returned 1
	[0077.425] CloseHandle (hObject=0x7a4) returned 1
	[0077.426] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 162
	[0077.426] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.427] free (_Block=0x3278898) 
	[0077.427] RtlExitUserThread (Status=0x0) 

Thread:
	id = 294
	os_tid = 0x1588

	[0077.428] _alloca_probe () returned 0x40328a
	[0077.429] GetCurrentThreadId () returned 0x1588
	[0077.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a8
	[0077.429] GetFileSizeEx (in: hFile=0x7a8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0077.429] CreateFileMappingA (hFile=0x7a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7ac
	[0077.430] MapViewOfFile (hFileMappingObject=0x7ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.431] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.431] CloseHandle (hObject=0x7ac) returned 1
	[0077.431] GetCurrentThreadId () returned 0x1588
	[0077.431] FlushFileBuffers (hFile=0x7a8) returned 1
	[0077.444] CloseHandle (hObject=0x7a8) returned 1
	[0077.446] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 162
	[0077.446] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.447] free (_Block=0x3277890) 
	[0077.447] RtlExitUserThread (Status=0x0) 

Thread:
	id = 295
	os_tid = 0x158c

	[0077.434] _alloca_probe () returned 0x40328a
	[0077.434] GetCurrentThreadId () returned 0x158c
	[0077.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b0
	[0077.435] GetFileSizeEx (in: hFile=0x7b0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=343329) returned 1
	[0077.435] CreateFileMappingA (hFile=0x7b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0x7b4
	[0077.438] MapViewOfFile (hFileMappingObject=0x7b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0077.499] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0077.502] CloseHandle (hObject=0x7b4) returned 1
	[0077.502] GetCurrentThreadId () returned 0x158c
	[0077.502] FlushFileBuffers (hFile=0x7b0) returned 1
	[0077.504] CloseHandle (hObject=0x7b0) returned 1
	[0077.512] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 162
	[0077.512] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.512] free (_Block=0x3275880) 
	[0077.512] RtlExitUserThread (Status=0x0) 

Thread:
	id = 296
	os_tid = 0x1590

	[0077.514] _alloca_probe () returned 0x40328a
	[0077.514] GetCurrentThreadId () returned 0x1590
	[0077.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b4
	[0077.515] GetFileSizeEx (in: hFile=0x7b4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=14913) returned 1
	[0077.515] CreateFileMappingA (hFile=0x7b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0x7a8
	[0077.516] MapViewOfFile (hFileMappingObject=0x7a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.518] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.519] CloseHandle (hObject=0x7a8) returned 1
	[0077.519] GetCurrentThreadId () returned 0x1590
	[0077.519] FlushFileBuffers (hFile=0x7b4) returned 1
	[0077.521] CloseHandle (hObject=0x7b4) returned 1
	[0077.523] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 162
	[0077.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.523] free (_Block=0x3276888) 
	[0077.523] RtlExitUserThread (Status=0x0) 

Thread:
	id = 297
	os_tid = 0x1594

	[0077.525] _alloca_probe () returned 0x40328a
	[0077.525] GetCurrentThreadId () returned 0x1594
	[0077.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a8
	[0077.526] GetFileSizeEx (in: hFile=0x7a8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=357353) returned 1
	[0077.526] CreateFileMappingA (hFile=0x7a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573f1, lpName=0x0) returned 0x7b8
	[0077.529] MapViewOfFile (hFileMappingObject=0x7b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0077.587] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0077.590] CloseHandle (hObject=0x7b8) returned 1
	[0077.591] GetCurrentThreadId () returned 0x1594
	[0077.591] FlushFileBuffers (hFile=0x7a8) returned 1
	[0077.592] CloseHandle (hObject=0x7a8) returned 1
	[0077.600] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 162
	[0077.600] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.601] free (_Block=0x32798a0) 
	[0077.601] RtlExitUserThread (Status=0x0) 

Thread:
	id = 298
	os_tid = 0x1598

	[0077.602] _alloca_probe () returned 0x40328a
	[0077.602] GetCurrentThreadId () returned 0x1598
	[0077.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b8
	[0077.603] GetFileSizeEx (in: hFile=0x7b8, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=1273) returned 1
	[0077.603] CreateFileMappingA (hFile=0x7b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7bc
	[0077.603] MapViewOfFile (hFileMappingObject=0x7bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0077.604] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0077.604] CloseHandle (hObject=0x7bc) returned 1
	[0077.604] GetCurrentThreadId () returned 0x1598
	[0077.604] FlushFileBuffers (hFile=0x7b8) returned 1
	[0077.606] CloseHandle (hObject=0x7b8) returned 1
	[0077.608] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 162
	[0077.608] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.608] free (_Block=0x3278898) 
	[0077.608] RtlExitUserThread (Status=0x0) 

Thread:
	id = 299
	os_tid = 0x159c

	[0077.609] _alloca_probe () returned 0x40328a
	[0077.610] GetCurrentThreadId () returned 0x159c
	[0077.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7bc
	[0077.610] GetFileSizeEx (in: hFile=0x7bc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=65011) returned 1
	[0077.610] CreateFileMappingA (hFile=0x7bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfdf5, lpName=0x0) returned 0x7c0
	[0077.611] MapViewOfFile (hFileMappingObject=0x7c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.623] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.623] CloseHandle (hObject=0x7c0) returned 1
	[0077.624] GetCurrentThreadId () returned 0x159c
	[0077.624] FlushFileBuffers (hFile=0x7bc) returned 1
	[0077.625] CloseHandle (hObject=0x7bc) returned 1
	[0077.628] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 162
	[0077.628] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.629] free (_Block=0x3275880) 
	[0077.629] RtlExitUserThread (Status=0x0) 

Thread:
	id = 300
	os_tid = 0x15a0

	[0077.630] _alloca_probe () returned 0x40328a
	[0077.631] GetCurrentThreadId () returned 0x15a0
	[0077.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c0
	[0077.631] GetFileSizeEx (in: hFile=0x7c0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0077.631] CreateFileMappingA (hFile=0x7c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7c4
	[0077.632] MapViewOfFile (hFileMappingObject=0x7c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.632] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.633] CloseHandle (hObject=0x7c4) returned 1
	[0077.633] GetCurrentThreadId () returned 0x15a0
	[0077.633] FlushFileBuffers (hFile=0x7c0) returned 1
	[0077.644] CloseHandle (hObject=0x7c0) returned 1
	[0077.646] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 162
	[0077.646] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.647] free (_Block=0x327a8a8) 
	[0077.647] RtlExitUserThread (Status=0x0) 

Thread:
	id = 301
	os_tid = 0x15a4

	[0077.642] _alloca_probe () returned 0x40328a
	[0077.643] GetCurrentThreadId () returned 0x15a4
	[0077.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0077.643] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1273) returned 1
	[0077.643] CreateFileMappingA (hFile=0x7c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7cc
	[0077.644] MapViewOfFile (hFileMappingObject=0x7cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.647] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.648] CloseHandle (hObject=0x7cc) returned 1
	[0077.648] GetCurrentThreadId () returned 0x15a4
	[0077.648] FlushFileBuffers (hFile=0x7c8) returned 1
	[0077.649] CloseHandle (hObject=0x7c8) returned 1
	[0077.651] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 162
	[0077.651] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.651] free (_Block=0x3276888) 
	[0077.651] RtlExitUserThread (Status=0x0) 

Thread:
	id = 302
	os_tid = 0x15a8

	[0077.653] _alloca_probe () returned 0x40328a
	[0077.654] GetCurrentThreadId () returned 0x15a8
	[0077.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7cc
	[0077.654] GetFileSizeEx (in: hFile=0x7cc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9216) returned 1
	[0077.654] CreateFileMappingA (hFile=0x7cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0x7c0
	[0077.655] MapViewOfFile (hFileMappingObject=0x7c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.657] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.657] CloseHandle (hObject=0x7c0) returned 1
	[0077.657] GetCurrentThreadId () returned 0x15a8
	[0077.657] FlushFileBuffers (hFile=0x7cc) returned 1
	[0077.659] CloseHandle (hObject=0x7cc) returned 1
	[0077.660] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 162
	[0077.660] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.661] free (_Block=0x327a8a8) 
	[0077.661] RtlExitUserThread (Status=0x0) 

Thread:
	id = 303
	os_tid = 0x15ac

	[0077.662] _alloca_probe () returned 0x40328a
	[0077.663] GetCurrentThreadId () returned 0x15ac
	[0077.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c0
	[0077.663] GetFileSizeEx (in: hFile=0x7c0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0077.663] CreateFileMappingA (hFile=0x7c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7d0
	[0077.664] MapViewOfFile (hFileMappingObject=0x7d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.665] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.665] CloseHandle (hObject=0x7d0) returned 1
	[0077.665] GetCurrentThreadId () returned 0x15ac
	[0077.665] FlushFileBuffers (hFile=0x7c0) returned 1
	[0077.667] CloseHandle (hObject=0x7c0) returned 1
	[0077.668] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 162
	[0077.668] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.672] free (_Block=0x3275880) 
	[0077.672] RtlExitUserThread (Status=0x0) 

Thread:
	id = 304
	os_tid = 0x15b0

	[0077.673] _alloca_probe () returned 0x40328a
	[0077.674] GetCurrentThreadId () returned 0x15b0
	[0077.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d0
	[0077.674] GetFileSizeEx (in: hFile=0x7d0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=399535) returned 1
	[0077.674] CreateFileMappingA (hFile=0x7d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618bd, lpName=0x0) returned 0x7d4
	[0077.677] MapViewOfFile (hFileMappingObject=0x7d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0077.744] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0077.748] CloseHandle (hObject=0x7d4) returned 1
	[0077.748] GetCurrentThreadId () returned 0x15b0
	[0077.748] FlushFileBuffers (hFile=0x7d0) returned 1
	[0077.751] CloseHandle (hObject=0x7d0) returned 1
	[0077.759] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 162
	[0077.759] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.760] free (_Block=0x32798a0) 
	[0077.760] RtlExitUserThread (Status=0x0) 

Thread:
	id = 305
	os_tid = 0x15b4

	[0077.761] _alloca_probe () returned 0x40328a
	[0077.762] GetCurrentThreadId () returned 0x15b4
	[0077.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d4
	[0077.762] GetFileSizeEx (in: hFile=0x7d4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1273) returned 1
	[0077.762] CreateFileMappingA (hFile=0x7d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7d8
	[0077.763] MapViewOfFile (hFileMappingObject=0x7d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0077.764] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0077.764] CloseHandle (hObject=0x7d8) returned 1
	[0077.764] GetCurrentThreadId () returned 0x15b4
	[0077.764] FlushFileBuffers (hFile=0x7d4) returned 1
	[0077.765] CloseHandle (hObject=0x7d4) returned 1
	[0077.767] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 162
	[0077.767] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.768] free (_Block=0x3274878) 
	[0077.768] RtlExitUserThread (Status=0x0) 

Thread:
	id = 306
	os_tid = 0x15b8

	[0077.769] _alloca_probe () returned 0x40328a
	[0077.770] GetCurrentThreadId () returned 0x15b8
	[0077.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d8
	[0077.770] GetFileSizeEx (in: hFile=0x7d8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1459) returned 1
	[0077.770] CreateFileMappingA (hFile=0x7d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b5, lpName=0x0) returned 0x7dc
	[0077.771] MapViewOfFile (hFileMappingObject=0x7dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.772] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.772] CloseHandle (hObject=0x7dc) returned 1
	[0077.772] GetCurrentThreadId () returned 0x15b8
	[0077.772] FlushFileBuffers (hFile=0x7d8) returned 1
	[0077.773] CloseHandle (hObject=0x7d8) returned 1
	[0077.775] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 162
	[0077.775] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.776] free (_Block=0x3275880) 
	[0077.776] RtlExitUserThread (Status=0x0) 

Thread:
	id = 307
	os_tid = 0x15bc

	[0077.777] _alloca_probe () returned 0x40328a
	[0077.778] GetCurrentThreadId () returned 0x15bc
	[0077.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7dc
	[0077.778] GetFileSizeEx (in: hFile=0x7dc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0077.778] CreateFileMappingA (hFile=0x7dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7e0
	[0077.779] MapViewOfFile (hFileMappingObject=0x7e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.780] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.780] CloseHandle (hObject=0x7e0) returned 1
	[0077.780] GetCurrentThreadId () returned 0x15bc
	[0077.780] FlushFileBuffers (hFile=0x7dc) returned 1
	[0077.783] CloseHandle (hObject=0x7dc) returned 1
	[0077.785] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 162
	[0077.785] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.785] free (_Block=0x3278898) 
	[0077.785] RtlExitUserThread (Status=0x0) 

Thread:
	id = 308
	os_tid = 0x15c0

	[0077.787] _alloca_probe () returned 0x40328a
	[0077.787] GetCurrentThreadId () returned 0x15c0
	[0077.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e0
	[0077.788] GetFileSizeEx (in: hFile=0x7e0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3763) returned 1
	[0077.788] CreateFileMappingA (hFile=0x7e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xeb5, lpName=0x0) returned 0x7e4
	[0077.788] MapViewOfFile (hFileMappingObject=0x7e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.789] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.789] CloseHandle (hObject=0x7e4) returned 1
	[0077.790] GetCurrentThreadId () returned 0x15c0
	[0077.790] FlushFileBuffers (hFile=0x7e0) returned 1
	[0077.791] CloseHandle (hObject=0x7e0) returned 1
	[0077.793] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 162
	[0077.793] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.794] free (_Block=0x3275880) 
	[0077.794] RtlExitUserThread (Status=0x0) 

Thread:
	id = 309
	os_tid = 0x15c4

	[0077.795] _alloca_probe () returned 0x40328a
	[0077.795] GetCurrentThreadId () returned 0x15c4
	[0077.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e4
	[0077.796] GetFileSizeEx (in: hFile=0x7e4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0077.796] CreateFileMappingA (hFile=0x7e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7e8
	[0077.796] MapViewOfFile (hFileMappingObject=0x7e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.797] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.797] CloseHandle (hObject=0x7e8) returned 1
	[0077.797] GetCurrentThreadId () returned 0x15c4
	[0077.797] FlushFileBuffers (hFile=0x7e4) returned 1
	[0077.799] CloseHandle (hObject=0x7e4) returned 1
	[0077.801] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 162
	[0077.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.812] free (_Block=0x3277890) 
	[0077.812] RtlExitUserThread (Status=0x0) 

Thread:
	id = 310
	os_tid = 0x15c8

	[0077.813] _alloca_probe () returned 0x40328a
	[0077.813] GetCurrentThreadId () returned 0x15c8
	[0077.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e8
	[0077.814] GetFileSizeEx (in: hFile=0x7e8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1273) returned 1
	[0077.814] CreateFileMappingA (hFile=0x7e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7ec
	[0077.815] MapViewOfFile (hFileMappingObject=0x7ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.815] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.815] CloseHandle (hObject=0x7ec) returned 1
	[0077.815] GetCurrentThreadId () returned 0x15c8
	[0077.815] FlushFileBuffers (hFile=0x7e8) returned 1
	[0077.823] CloseHandle (hObject=0x7e8) returned 1
	[0077.825] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 162
	[0077.825] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.825] free (_Block=0x3274878) 
	[0077.826] RtlExitUserThread (Status=0x0) 

Thread:
	id = 311
	os_tid = 0x15cc

	[0077.819] _alloca_probe () returned 0x40328a
	[0077.820] GetCurrentThreadId () returned 0x15cc
	[0077.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f0
	[0077.820] GetFileSizeEx (in: hFile=0x7f0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1273) returned 1
	[0077.820] CreateFileMappingA (hFile=0x7f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7f4
	[0077.821] MapViewOfFile (hFileMappingObject=0x7f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0077.822] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0077.822] CloseHandle (hObject=0x7f4) returned 1
	[0077.822] GetCurrentThreadId () returned 0x15cc
	[0077.822] FlushFileBuffers (hFile=0x7f0) returned 1
	[0077.827] CloseHandle (hObject=0x7f0) returned 1
	[0077.827] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 162
	[0077.827] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.828] free (_Block=0x32798a0) 
	[0077.828] RtlExitUserThread (Status=0x0) 

Thread:
	id = 312
	os_tid = 0x15d0

	[0077.829] _alloca_probe () returned 0x40328a
	[0077.829] GetCurrentThreadId () returned 0x15d0
	[0077.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0077.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e8
	[0077.830] GetFileSizeEx (in: hFile=0x7e8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=527963) returned 1
	[0077.830] CreateFileMappingA (hFile=0x7e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e65, lpName=0x0) returned 0x7f4
	[0077.834] MapViewOfFile (hFileMappingObject=0x7f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0077.962] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0077.973] CloseHandle (hObject=0x7f4) returned 1
	[0077.973] GetCurrentThreadId () returned 0x15d0
	[0077.973] FlushFileBuffers (hFile=0x7e8) returned 1
	[0077.975] CloseHandle (hObject=0x7e8) returned 1
	[0077.975] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 162
	[0077.975] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.976] free (_Block=0x3275880) 
	[0077.976] RtlExitUserThread (Status=0x0) 

Thread:
	id = 313
	os_tid = 0x15d4

	[0078.043] _alloca_probe () returned 0x40328a
	[0078.044] GetCurrentThreadId () returned 0x15d4
	[0078.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4
	[0078.044] GetFileSizeEx (in: hFile=0x7f4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1273) returned 1
	[0078.044] CreateFileMappingA (hFile=0x7f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7f8
	[0078.045] MapViewOfFile (hFileMappingObject=0x7f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0078.046] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0078.046] CloseHandle (hObject=0x7f8) returned 1
	[0078.046] GetCurrentThreadId () returned 0x15d4
	[0078.046] FlushFileBuffers (hFile=0x7f4) returned 1
	[0078.047] CloseHandle (hObject=0x7f4) returned 1
	[0078.048] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 162
	[0078.048] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.048] free (_Block=0x3277890) 
	[0078.049] RtlExitUserThread (Status=0x0) 

Thread:
	id = 314
	os_tid = 0x15d8

	[0078.050] _alloca_probe () returned 0x40328a
	[0078.051] GetCurrentThreadId () returned 0x15d8
	[0078.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f8
	[0078.051] GetFileSizeEx (in: hFile=0x7f8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3389) returned 1
	[0078.051] CreateFileMappingA (hFile=0x7f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd49, lpName=0x0) returned 0x7fc
	[0078.052] MapViewOfFile (hFileMappingObject=0x7fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0078.053] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0078.053] CloseHandle (hObject=0x7fc) returned 1
	[0078.053] GetCurrentThreadId () returned 0x15d8
	[0078.053] FlushFileBuffers (hFile=0x7f8) returned 1
	[0078.055] CloseHandle (hObject=0x7f8) returned 1
	[0078.055] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 162
	[0078.055] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.056] free (_Block=0x327a8a8) 
	[0078.056] RtlExitUserThread (Status=0x0) 

Thread:
	id = 315
	os_tid = 0x15dc

	[0078.057] _alloca_probe () returned 0x40328a
	[0078.058] GetCurrentThreadId () returned 0x15dc
	[0078.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml", dwFileAttributes=0x80) returned 1
	[0078.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.common.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7fc
	[0078.058] GetFileSizeEx (in: hFile=0x7fc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2173051) returned 1
	[0078.058] CreateFileMappingA (hFile=0x7fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x212885, lpName=0x0) returned 0x804
	[0078.059] MapViewOfFile (hFileMappingObject=0x804, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0078.403] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0078.432] CloseHandle (hObject=0x804) returned 1
	[0078.432] GetCurrentThreadId () returned 0x15dc
	[0078.432] FlushFileBuffers (hFile=0x7fc) returned 1
	[0078.436] CloseHandle (hObject=0x7fc) returned 1
	[0078.436] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 132
	[0078.436] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml")) returned 1
	[0078.437] free (_Block=0x3274878) 
	[0078.437] RtlExitUserThread (Status=0x0) 

Thread:
	id = 316
	os_tid = 0x15e0

	[0078.439] _alloca_probe () returned 0x40328a
	[0078.439] GetCurrentThreadId () returned 0x15e0
	[0078.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0078.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804
	[0078.440] GetFileSizeEx (in: hFile=0x804, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9837) returned 1
	[0078.440] CreateFileMappingA (hFile=0x804, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2679, lpName=0x0) returned 0x808
	[0078.441] MapViewOfFile (hFileMappingObject=0x808, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0078.443] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0078.443] CloseHandle (hObject=0x808) returned 1
	[0078.443] GetCurrentThreadId () returned 0x15e0
	[0078.443] FlushFileBuffers (hFile=0x804) returned 1
	[0078.445] CloseHandle (hObject=0x804) returned 1
	[0078.445] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 134
	[0078.445] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0078.453] free (_Block=0x32798a0) 
	[0078.453] RtlExitUserThread (Status=0x0) 

Thread:
	id = 317
	os_tid = 0x15e4

	[0078.447] _alloca_probe () returned 0x40328a
	[0078.447] GetCurrentThreadId () returned 0x15e4
	[0078.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0078.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c
	[0078.449] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=377) returned 1
	[0078.449] CreateFileMappingA (hFile=0x80c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181, lpName=0x0) returned 0x810
	[0078.450] MapViewOfFile (hFileMappingObject=0x810, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0078.450] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0078.450] CloseHandle (hObject=0x810) returned 1
	[0078.450] GetCurrentThreadId () returned 0x15e4
	[0078.450] FlushFileBuffers (hFile=0x80c) returned 1
	[0078.453] CloseHandle (hObject=0x80c) returned 1
	[0078.453] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 131
	[0078.454] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0078.454] free (_Block=0x3274878) 
	[0078.454] RtlExitUserThread (Status=0x0) 

Thread:
	id = 318
	os_tid = 0x15e8

	[0078.499] _alloca_probe () returned 0x40328a
	[0078.499] GetCurrentThreadId () returned 0x15e8
	[0078.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804
	[0078.500] GetFileSizeEx (in: hFile=0x804, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=387373) returned 1
	[0078.500] CreateFileMappingA (hFile=0x804, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e939, lpName=0x0) returned 0x810
	[0078.503] MapViewOfFile (hFileMappingObject=0x810, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0078.568] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0078.571] CloseHandle (hObject=0x810) returned 1
	[0078.571] GetCurrentThreadId () returned 0x15e8
	[0078.571] FlushFileBuffers (hFile=0x804) returned 1
	[0078.576] CloseHandle (hObject=0x804) returned 1
	[0078.576] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 191
	[0078.576] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.577] free (_Block=0x3276888) 
	[0078.577] RtlExitUserThread (Status=0x0) 

Thread:
	id = 319
	os_tid = 0x15ec

	[0078.574] _alloca_probe () returned 0x40328a
	[0078.574] GetCurrentThreadId () returned 0x15ec
	[0078.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814
	[0078.575] GetFileSizeEx (in: hFile=0x814, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=1553) returned 1
	[0078.575] CreateFileMappingA (hFile=0x814, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x611, lpName=0x0) returned 0x818
	[0078.576] MapViewOfFile (hFileMappingObject=0x818, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0078.578] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0078.578] CloseHandle (hObject=0x818) returned 1
	[0078.578] GetCurrentThreadId () returned 0x15ec
	[0078.578] FlushFileBuffers (hFile=0x814) returned 1
	[0078.580] CloseHandle (hObject=0x814) returned 1
	[0078.580] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 191
	[0078.580] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.590] free (_Block=0x3278898) 
	[0078.590] RtlExitUserThread (Status=0x0) 

Thread:
	id = 320
	os_tid = 0x15f0

	[0078.592] _alloca_probe () returned 0x40328a
	[0078.592] GetCurrentThreadId () returned 0x15f0
	[0078.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x818
	[0078.593] GetFileSizeEx (in: hFile=0x818, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=800873) returned 1
	[0078.593] CreateFileMappingA (hFile=0x818, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3871, lpName=0x0) returned 0x804
	[0078.599] MapViewOfFile (hFileMappingObject=0x804, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0078.729] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0078.736] CloseHandle (hObject=0x804) returned 1
	[0078.736] GetCurrentThreadId () returned 0x15f0
	[0078.736] FlushFileBuffers (hFile=0x818) returned 1
	[0078.739] CloseHandle (hObject=0x818) returned 1
	[0078.739] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 191
	[0078.740] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.740] free (_Block=0x3274878) 
	[0078.740] RtlExitUserThread (Status=0x0) 

Thread:
	id = 321
	os_tid = 0x15f4

	[0078.780] _alloca_probe () returned 0x40328a
	[0078.781] GetCurrentThreadId () returned 0x15f4
	[0078.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804
	[0078.781] GetFileSizeEx (in: hFile=0x804, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1281) returned 1
	[0078.781] CreateFileMappingA (hFile=0x804, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x81c
	[0078.782] MapViewOfFile (hFileMappingObject=0x81c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0078.782] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0078.783] CloseHandle (hObject=0x81c) returned 1
	[0078.783] GetCurrentThreadId () returned 0x15f4
	[0078.783] FlushFileBuffers (hFile=0x804) returned 1
	[0078.784] CloseHandle (hObject=0x804) returned 1
	[0078.785] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 191
	[0078.785] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.785] free (_Block=0x32798a0) 
	[0078.785] RtlExitUserThread (Status=0x0) 

Thread:
	id = 322
	os_tid = 0x15f8

	[0078.787] _alloca_probe () returned 0x40328a
	[0078.787] GetCurrentThreadId () returned 0x15f8
	[0078.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0078.788] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=496513) returned 1
	[0078.788] CreateFileMappingA (hFile=0x81c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0x820
	[0078.791] MapViewOfFile (hFileMappingObject=0x820, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0078.870] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0078.875] CloseHandle (hObject=0x820) returned 1
	[0078.875] GetCurrentThreadId () returned 0x15f8
	[0078.875] FlushFileBuffers (hFile=0x81c) returned 1
	[0078.877] CloseHandle (hObject=0x81c) returned 1
	[0078.877] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 191
	[0078.877] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.878] free (_Block=0x3278898) 
	[0078.878] RtlExitUserThread (Status=0x0) 

Thread:
	id = 323
	os_tid = 0x15fc

	[0078.985] _alloca_probe () returned 0x40328a
	[0078.985] GetCurrentThreadId () returned 0x15fc
	[0078.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x820
	[0078.986] GetFileSizeEx (in: hFile=0x820, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=1281) returned 1
	[0078.986] CreateFileMappingA (hFile=0x820, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x824
	[0078.987] MapViewOfFile (hFileMappingObject=0x824, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0078.987] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0078.988] CloseHandle (hObject=0x824) returned 1
	[0078.988] GetCurrentThreadId () returned 0x15fc
	[0078.988] FlushFileBuffers (hFile=0x820) returned 1
	[0078.989] CloseHandle (hObject=0x820) returned 1
	[0078.990] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 191
	[0078.990] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.990] free (_Block=0x327a8a8) 
	[0078.991] RtlExitUserThread (Status=0x0) 

Thread:
	id = 324
	os_tid = 0x1600

	[0078.996] _alloca_probe () returned 0x40328a
	[0078.997] GetCurrentThreadId () returned 0x1600
	[0078.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0078.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x824
	[0078.997] GetFileSizeEx (in: hFile=0x824, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=253712) returned 1
	[0078.997] CreateFileMappingA (hFile=0x824, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x828
	[0078.999] MapViewOfFile (hFileMappingObject=0x828, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0079.041] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0079.044] CloseHandle (hObject=0x828) returned 1
	[0079.044] GetCurrentThreadId () returned 0x1600
	[0079.044] FlushFileBuffers (hFile=0x824) returned 1
	[0079.046] CloseHandle (hObject=0x824) returned 1
	[0079.046] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 191
	[0079.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0079.047] free (_Block=0x327a8a8) 
	[0079.047] RtlExitUserThread (Status=0x0) 

Thread:
	id = 325
	os_tid = 0x1604

	[0079.091] _alloca_probe () returned 0x40328a
	[0079.091] GetCurrentThreadId () returned 0x1604
	[0079.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x828
	[0079.091] GetFileSizeEx (in: hFile=0x828, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1281) returned 1
	[0079.092] CreateFileMappingA (hFile=0x828, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x82c
	[0079.092] MapViewOfFile (hFileMappingObject=0x82c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0079.093] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0079.093] CloseHandle (hObject=0x82c) returned 1
	[0079.093] GetCurrentThreadId () returned 0x1604
	[0079.093] FlushFileBuffers (hFile=0x828) returned 1
	[0079.095] CloseHandle (hObject=0x828) returned 1
	[0079.095] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 191
	[0079.095] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0079.096] free (_Block=0x3274878) 
	[0079.096] RtlExitUserThread (Status=0x0) 

Thread:
	id = 326
	os_tid = 0x1608

	[0079.098] _alloca_probe () returned 0x40328a
	[0079.098] GetCurrentThreadId () returned 0x1608
	[0079.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x82c
	[0079.099] GetFileSizeEx (in: hFile=0x82c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1124965) returned 1
	[0079.099] CreateFileMappingA (hFile=0x82c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a69, lpName=0x0) returned 0x830
	[0079.107] MapViewOfFile (hFileMappingObject=0x830, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0079.290] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0079.300] CloseHandle (hObject=0x830) returned 1
	[0079.300] GetCurrentThreadId () returned 0x1608
	[0079.300] FlushFileBuffers (hFile=0x82c) returned 1
	[0079.312] CloseHandle (hObject=0x82c) returned 1
	[0079.312] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 191
	[0079.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0079.313] free (_Block=0x32798a0) 
	[0079.313] RtlExitUserThread (Status=0x0) 

Thread:
	id = 327
	os_tid = 0x160c

	[0079.302] _alloca_probe () returned 0x40328a
	[0079.303] GetCurrentThreadId () returned 0x160c
	[0079.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x834
	[0079.306] GetFileSizeEx (in: hFile=0x834, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=19465) returned 1
	[0079.306] CreateFileMappingA (hFile=0x834, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c11, lpName=0x0) returned 0x838
	[0079.307] MapViewOfFile (hFileMappingObject=0x838, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0079.311] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0079.311] CloseHandle (hObject=0x838) returned 1
	[0079.311] GetCurrentThreadId () returned 0x160c
	[0079.311] FlushFileBuffers (hFile=0x834) returned 1
	[0079.314] CloseHandle (hObject=0x834) returned 1
	[0079.315] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 191
	[0079.315] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0079.315] free (_Block=0x327a8a8) 
	[0079.315] RtlExitUserThread (Status=0x0) 

Thread:
	id = 328
	os_tid = 0x1610

	[0079.317] _alloca_probe () returned 0x40328a
	[0079.318] GetCurrentThreadId () returned 0x1610
	[0079.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x82c
	[0079.318] GetFileSizeEx (in: hFile=0x82c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=763369) returned 1
	[0079.318] CreateFileMappingA (hFile=0x82c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5f1, lpName=0x0) returned 0x838
	[0079.324] MapViewOfFile (hFileMappingObject=0x838, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0079.449] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0079.455] CloseHandle (hObject=0x838) returned 1
	[0079.456] GetCurrentThreadId () returned 0x1610
	[0079.456] FlushFileBuffers (hFile=0x82c) returned 1
	[0079.458] CloseHandle (hObject=0x82c) returned 1
	[0079.458] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 191
	[0079.458] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0079.459] free (_Block=0x32798a0) 
	[0079.459] RtlExitUserThread (Status=0x0) 

Thread:
	id = 329
	os_tid = 0x1614

	[0079.460] _alloca_probe () returned 0x40328a
	[0079.461] GetCurrentThreadId () returned 0x1614
	[0079.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x838
	[0079.461] GetFileSizeEx (in: hFile=0x838, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0079.461] CreateFileMappingA (hFile=0x838, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x83c
	[0079.462] MapViewOfFile (hFileMappingObject=0x83c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0079.463] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0079.463] CloseHandle (hObject=0x83c) returned 1
	[0079.463] GetCurrentThreadId () returned 0x1614
	[0079.463] FlushFileBuffers (hFile=0x838) returned 1
	[0079.590] CloseHandle (hObject=0x838) returned 1
	[0079.590] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 191
	[0079.590] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0079.591] free (_Block=0x327b8b0) 
	[0079.591] RtlExitUserThread (Status=0x0) 

Thread:
	id = 330
	os_tid = 0x161c

	[0079.654] _alloca_probe () returned 0x40328a
	[0079.655] GetCurrentThreadId () returned 0x161c
	[0079.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x83c
	[0079.655] GetFileSizeEx (in: hFile=0x83c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0079.655] CreateFileMappingA (hFile=0x83c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x840
	[0079.656] MapViewOfFile (hFileMappingObject=0x840, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0079.657] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0079.657] CloseHandle (hObject=0x840) returned 1
	[0079.657] GetCurrentThreadId () returned 0x161c
	[0079.657] FlushFileBuffers (hFile=0x83c) returned 1
	[0079.659] CloseHandle (hObject=0x83c) returned 1
	[0079.659] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 191
	[0079.659] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0079.660] free (_Block=0x3277890) 
	[0079.660] RtlExitUserThread (Status=0x0) 

Thread:
	id = 331
	os_tid = 0x1620

	[0079.661] _alloca_probe () returned 0x40328a
	[0079.662] GetCurrentThreadId () returned 0x1620
	[0079.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x840
	[0079.662] GetFileSizeEx (in: hFile=0x840, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2153) returned 1
	[0079.662] CreateFileMappingA (hFile=0x840, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x844
	[0079.663] MapViewOfFile (hFileMappingObject=0x844, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0079.664] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0079.664] CloseHandle (hObject=0x844) returned 1
	[0079.664] GetCurrentThreadId () returned 0x1620
	[0079.664] FlushFileBuffers (hFile=0x840) returned 1
	[0079.667] CloseHandle (hObject=0x840) returned 1
	[0079.668] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 191
	[0079.668] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0079.668] free (_Block=0x327b8b0) 
	[0079.668] RtlExitUserThread (Status=0x0) 

Thread:
	id = 332
	os_tid = 0x1624

	[0079.670] _alloca_probe () returned 0x40328a
	[0079.670] GetCurrentThreadId () returned 0x1624
	[0079.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x844
	[0079.670] GetFileSizeEx (in: hFile=0x844, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2153) returned 1
	[0079.670] CreateFileMappingA (hFile=0x844, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x848
	[0079.671] MapViewOfFile (hFileMappingObject=0x848, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0079.672] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0079.672] CloseHandle (hObject=0x848) returned 1
	[0079.672] GetCurrentThreadId () returned 0x1624
	[0079.672] FlushFileBuffers (hFile=0x844) returned 1
	[0079.674] CloseHandle (hObject=0x844) returned 1
	[0079.674] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 191
	[0079.674] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0079.675] free (_Block=0x3277890) 
	[0079.675] RtlExitUserThread (Status=0x0) 

Thread:
	id = 333
	os_tid = 0x1628

	[0079.677] _alloca_probe () returned 0x40328a
	[0079.678] GetCurrentThreadId () returned 0x1628
	[0079.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x848
	[0079.678] GetFileSizeEx (in: hFile=0x848, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=215897) returned 1
	[0079.678] CreateFileMappingA (hFile=0x848, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b61, lpName=0x0) returned 0x84c
	[0079.680] MapViewOfFile (hFileMappingObject=0x84c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0079.717] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0079.719] CloseHandle (hObject=0x84c) returned 1
	[0079.719] GetCurrentThreadId () returned 0x1628
	[0079.719] FlushFileBuffers (hFile=0x848) returned 1
	[0079.720] CloseHandle (hObject=0x848) returned 1
	[0079.721] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 191
	[0079.721] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0079.721] free (_Block=0x3276888) 
	[0079.721] RtlExitUserThread (Status=0x0) 

Thread:
	id = 334
	os_tid = 0x162c

	[0079.723] _alloca_probe () returned 0x40328a
	[0079.723] GetCurrentThreadId () returned 0x162c
	[0079.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84c
	[0079.724] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0079.724] CreateFileMappingA (hFile=0x84c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x850
	[0079.725] MapViewOfFile (hFileMappingObject=0x850, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0079.725] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0079.726] CloseHandle (hObject=0x850) returned 1
	[0079.726] GetCurrentThreadId () returned 0x162c
	[0079.726] FlushFileBuffers (hFile=0x84c) returned 1
	[0079.727] CloseHandle (hObject=0x84c) returned 1
	[0079.728] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 191
	[0079.728] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0079.728] free (_Block=0x3276888) 
	[0079.728] RtlExitUserThread (Status=0x0) 

Thread:
	id = 335
	os_tid = 0x1630

	[0079.730] _alloca_probe () returned 0x40328a
	[0079.731] GetCurrentThreadId () returned 0x1630
	[0079.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x850
	[0079.731] GetFileSizeEx (in: hFile=0x850, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0079.731] CreateFileMappingA (hFile=0x850, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x854
	[0079.732] MapViewOfFile (hFileMappingObject=0x854, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0079.733] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0079.733] CloseHandle (hObject=0x854) returned 1
	[0079.733] GetCurrentThreadId () returned 0x1630
	[0079.733] FlushFileBuffers (hFile=0x850) returned 1
	[0079.734] CloseHandle (hObject=0x850) returned 1
	[0079.735] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 191
	[0079.735] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0079.735] free (_Block=0x3278898) 
	[0079.735] RtlExitUserThread (Status=0x0) 

Thread:
	id = 336
	os_tid = 0x1634

	[0079.737] _alloca_probe () returned 0x40328a
	[0079.738] GetCurrentThreadId () returned 0x1634
	[0079.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x854
	[0079.738] GetFileSizeEx (in: hFile=0x854, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=343329) returned 1
	[0079.738] CreateFileMappingA (hFile=0x854, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0x858
	[0079.741] MapViewOfFile (hFileMappingObject=0x858, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0079.799] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0079.802] CloseHandle (hObject=0x858) returned 1
	[0079.802] GetCurrentThreadId () returned 0x1634
	[0079.802] FlushFileBuffers (hFile=0x854) returned 1
	[0079.805] CloseHandle (hObject=0x854) returned 1
	[0079.805] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 191
	[0079.806] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0079.806] free (_Block=0x327a8a8) 
	[0079.806] RtlExitUserThread (Status=0x0) 

Thread:
	id = 337
	os_tid = 0x1638

	[0079.807] _alloca_probe () returned 0x40328a
	[0079.808] GetCurrentThreadId () returned 0x1638
	[0079.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x858
	[0079.808] GetFileSizeEx (in: hFile=0x858, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=14913) returned 1
	[0079.808] CreateFileMappingA (hFile=0x858, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0x85c
	[0079.809] MapViewOfFile (hFileMappingObject=0x85c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0079.812] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0079.812] CloseHandle (hObject=0x85c) returned 1
	[0079.812] GetCurrentThreadId () returned 0x1638
	[0079.812] FlushFileBuffers (hFile=0x858) returned 1
	[0079.814] CloseHandle (hObject=0x858) returned 1
	[0079.814] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 191
	[0079.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0079.815] free (_Block=0x3278898) 
	[0079.815] RtlExitUserThread (Status=0x0) 

Thread:
	id = 338
	os_tid = 0x163c

	[0079.817] _alloca_probe () returned 0x40328a
	[0079.817] GetCurrentThreadId () returned 0x163c
	[0079.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x85c
	[0079.818] GetFileSizeEx (in: hFile=0x85c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=357361) returned 1
	[0079.818] CreateFileMappingA (hFile=0x85c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573f1, lpName=0x0) returned 0x860
	[0079.821] MapViewOfFile (hFileMappingObject=0x860, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0079.882] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0079.885] CloseHandle (hObject=0x860) returned 1
	[0079.885] GetCurrentThreadId () returned 0x163c
	[0079.885] FlushFileBuffers (hFile=0x85c) returned 1
	[0079.888] CloseHandle (hObject=0x85c) returned 1
	[0079.888] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 191
	[0079.888] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0079.889] free (_Block=0x3276888) 
	[0079.889] RtlExitUserThread (Status=0x0) 

Thread:
	id = 339
	os_tid = 0x1640

	[0079.997] _alloca_probe () returned 0x40328a
	[0079.998] GetCurrentThreadId () returned 0x1640
	[0079.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0079.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0079.998] GetFileSizeEx (in: hFile=0x860, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0079.998] CreateFileMappingA (hFile=0x860, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x864
	[0079.999] MapViewOfFile (hFileMappingObject=0x864, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.000] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.000] CloseHandle (hObject=0x864) returned 1
	[0080.000] GetCurrentThreadId () returned 0x1640
	[0080.000] FlushFileBuffers (hFile=0x860) returned 1
	[0080.002] CloseHandle (hObject=0x860) returned 1
	[0080.002] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 191
	[0080.002] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.003] free (_Block=0x3277890) 
	[0080.003] RtlExitUserThread (Status=0x0) 

Thread:
	id = 340
	os_tid = 0x1644

	[0080.005] _alloca_probe () returned 0x40328a
	[0080.006] GetCurrentThreadId () returned 0x1644
	[0080.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x864
	[0080.006] GetFileSizeEx (in: hFile=0x864, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=65013) returned 1
	[0080.006] CreateFileMappingA (hFile=0x864, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfdf9, lpName=0x0) returned 0x868
	[0080.007] MapViewOfFile (hFileMappingObject=0x868, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.020] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.020] CloseHandle (hObject=0x868) returned 1
	[0080.020] GetCurrentThreadId () returned 0x1644
	[0080.020] FlushFileBuffers (hFile=0x864) returned 1
	[0080.022] CloseHandle (hObject=0x864) returned 1
	[0080.022] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 191
	[0080.022] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.025] free (_Block=0x3274878) 
	[0080.025] RtlExitUserThread (Status=0x0) 

Thread:
	id = 341
	os_tid = 0x1648

	[0080.027] _alloca_probe () returned 0x40328a
	[0080.028] GetCurrentThreadId () returned 0x1648
	[0080.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868
	[0080.028] GetFileSizeEx (in: hFile=0x868, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0080.028] CreateFileMappingA (hFile=0x868, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x86c
	[0080.029] MapViewOfFile (hFileMappingObject=0x86c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.030] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.030] CloseHandle (hObject=0x86c) returned 1
	[0080.030] GetCurrentThreadId () returned 0x1648
	[0080.030] FlushFileBuffers (hFile=0x868) returned 1
	[0080.032] CloseHandle (hObject=0x868) returned 1
	[0080.032] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 191
	[0080.032] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.033] free (_Block=0x3276888) 
	[0080.033] RtlExitUserThread (Status=0x0) 

Thread:
	id = 342
	os_tid = 0x164c

	[0080.035] _alloca_probe () returned 0x40328a
	[0080.035] GetCurrentThreadId () returned 0x164c
	[0080.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0080.036] GetFileSizeEx (in: hFile=0x86c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0080.036] CreateFileMappingA (hFile=0x86c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x870
	[0080.037] MapViewOfFile (hFileMappingObject=0x870, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.037] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.038] CloseHandle (hObject=0x870) returned 1
	[0080.038] GetCurrentThreadId () returned 0x164c
	[0080.038] FlushFileBuffers (hFile=0x86c) returned 1
	[0080.039] CloseHandle (hObject=0x86c) returned 1
	[0080.040] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 191
	[0080.040] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.040] free (_Block=0x3274878) 
	[0080.040] RtlExitUserThread (Status=0x0) 

Thread:
	id = 343
	os_tid = 0x1650

	[0080.042] _alloca_probe () returned 0x40328a
	[0080.043] GetCurrentThreadId () returned 0x1650
	[0080.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870
	[0080.043] GetFileSizeEx (in: hFile=0x870, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9216) returned 1
	[0080.043] CreateFileMappingA (hFile=0x870, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0x874
	[0080.044] MapViewOfFile (hFileMappingObject=0x874, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.046] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.046] CloseHandle (hObject=0x874) returned 1
	[0080.046] GetCurrentThreadId () returned 0x1650
	[0080.046] FlushFileBuffers (hFile=0x870) returned 1
	[0080.048] CloseHandle (hObject=0x870) returned 1
	[0080.048] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 191
	[0080.048] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.049] free (_Block=0x327b8b0) 
	[0080.049] RtlExitUserThread (Status=0x0) 

Thread:
	id = 344
	os_tid = 0x1654

	[0080.051] _alloca_probe () returned 0x40328a
	[0080.051] GetCurrentThreadId () returned 0x1654
	[0080.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x874
	[0080.051] GetFileSizeEx (in: hFile=0x874, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0080.051] CreateFileMappingA (hFile=0x874, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x878
	[0080.052] MapViewOfFile (hFileMappingObject=0x878, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.053] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.053] CloseHandle (hObject=0x878) returned 1
	[0080.053] GetCurrentThreadId () returned 0x1654
	[0080.053] FlushFileBuffers (hFile=0x874) returned 1
	[0080.055] CloseHandle (hObject=0x874) returned 1
	[0080.055] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 191
	[0080.055] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.056] free (_Block=0x3277890) 
	[0080.056] RtlExitUserThread (Status=0x0) 

Thread:
	id = 345
	os_tid = 0x1658

	[0080.058] _alloca_probe () returned 0x40328a
	[0080.058] GetCurrentThreadId () returned 0x1658
	[0080.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x878
	[0080.059] GetFileSizeEx (in: hFile=0x878, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=399549) returned 1
	[0080.059] CreateFileMappingA (hFile=0x878, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618c9, lpName=0x0) returned 0x87c
	[0080.062] MapViewOfFile (hFileMappingObject=0x87c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0080.127] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0080.130] CloseHandle (hObject=0x87c) returned 1
	[0080.130] GetCurrentThreadId () returned 0x1658
	[0080.130] FlushFileBuffers (hFile=0x878) returned 1
	[0080.167] CloseHandle (hObject=0x878) returned 1
	[0080.168] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 191
	[0080.168] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.168] free (_Block=0x3274878) 
	[0080.168] RtlExitUserThread (Status=0x0) 

Thread:
	id = 346
	os_tid = 0x165c

	[0080.215] _alloca_probe () returned 0x40328a
	[0080.216] GetCurrentThreadId () returned 0x165c
	[0080.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x87c
	[0080.216] GetFileSizeEx (in: hFile=0x87c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0080.216] CreateFileMappingA (hFile=0x87c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x880
	[0080.217] MapViewOfFile (hFileMappingObject=0x880, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.218] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.218] CloseHandle (hObject=0x880) returned 1
	[0080.218] GetCurrentThreadId () returned 0x165c
	[0080.218] FlushFileBuffers (hFile=0x87c) returned 1
	[0080.220] CloseHandle (hObject=0x87c) returned 1
	[0080.220] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 191
	[0080.220] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.221] free (_Block=0x32798a0) 
	[0080.221] RtlExitUserThread (Status=0x0) 

Thread:
	id = 347
	os_tid = 0x1660

	[0080.222] _alloca_probe () returned 0x40328a
	[0080.223] GetCurrentThreadId () returned 0x1660
	[0080.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x880
	[0080.223] GetFileSizeEx (in: hFile=0x880, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1461) returned 1
	[0080.223] CreateFileMappingA (hFile=0x880, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b9, lpName=0x0) returned 0x884
	[0080.224] MapViewOfFile (hFileMappingObject=0x884, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.225] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.225] CloseHandle (hObject=0x884) returned 1
	[0080.225] GetCurrentThreadId () returned 0x1660
	[0080.225] FlushFileBuffers (hFile=0x880) returned 1
	[0080.236] CloseHandle (hObject=0x880) returned 1
	[0080.236] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 191
	[0080.236] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.237] free (_Block=0x32798a0) 
	[0080.237] RtlExitUserThread (Status=0x0) 

Thread:
	id = 348
	os_tid = 0x1664

	[0080.228] _alloca_probe () returned 0x40328a
	[0080.229] GetCurrentThreadId () returned 0x1664
	[0080.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888
	[0080.233] GetFileSizeEx (in: hFile=0x888, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1281) returned 1
	[0080.233] CreateFileMappingA (hFile=0x888, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x88c
	[0080.234] MapViewOfFile (hFileMappingObject=0x88c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.235] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.235] CloseHandle (hObject=0x88c) returned 1
	[0080.235] GetCurrentThreadId () returned 0x1664
	[0080.235] FlushFileBuffers (hFile=0x888) returned 1
	[0080.238] CloseHandle (hObject=0x888) returned 1
	[0080.238] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 191
	[0080.238] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.239] free (_Block=0x3275880) 
	[0080.239] RtlExitUserThread (Status=0x0) 

Thread:
	id = 349
	os_tid = 0x1668

	[0080.241] _alloca_probe () returned 0x40328a
	[0080.242] GetCurrentThreadId () returned 0x1668
	[0080.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x880
	[0080.242] GetFileSizeEx (in: hFile=0x880, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3765) returned 1
	[0080.242] CreateFileMappingA (hFile=0x880, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xeb9, lpName=0x0) returned 0x88c
	[0080.243] MapViewOfFile (hFileMappingObject=0x88c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.244] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.244] CloseHandle (hObject=0x88c) returned 1
	[0080.244] GetCurrentThreadId () returned 0x1668
	[0080.244] FlushFileBuffers (hFile=0x880) returned 1
	[0080.246] CloseHandle (hObject=0x880) returned 1
	[0080.246] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 191
	[0080.246] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.247] free (_Block=0x3278898) 
	[0080.247] RtlExitUserThread (Status=0x0) 

Thread:
	id = 350
	os_tid = 0x166c

	[0080.249] _alloca_probe () returned 0x40328a
	[0080.250] GetCurrentThreadId () returned 0x166c
	[0080.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88c
	[0080.250] GetFileSizeEx (in: hFile=0x88c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0080.250] CreateFileMappingA (hFile=0x88c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x890
	[0080.251] MapViewOfFile (hFileMappingObject=0x890, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.251] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.251] CloseHandle (hObject=0x890) returned 1
	[0080.251] GetCurrentThreadId () returned 0x166c
	[0080.252] FlushFileBuffers (hFile=0x88c) returned 1
	[0080.253] CloseHandle (hObject=0x88c) returned 1
	[0080.253] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 191
	[0080.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.254] free (_Block=0x327b8b0) 
	[0080.254] RtlExitUserThread (Status=0x0) 

Thread:
	id = 351
	os_tid = 0x1670

	[0080.256] _alloca_probe () returned 0x40328a
	[0080.256] GetCurrentThreadId () returned 0x1670
	[0080.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x890
	[0080.257] GetFileSizeEx (in: hFile=0x890, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0080.257] CreateFileMappingA (hFile=0x890, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x894
	[0080.257] MapViewOfFile (hFileMappingObject=0x894, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.258] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.258] CloseHandle (hObject=0x894) returned 1
	[0080.258] GetCurrentThreadId () returned 0x1670
	[0080.258] FlushFileBuffers (hFile=0x890) returned 1
	[0080.260] CloseHandle (hObject=0x890) returned 1
	[0080.261] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 191
	[0080.261] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.261] free (_Block=0x32798a0) 
	[0080.261] RtlExitUserThread (Status=0x0) 

Thread:
	id = 352
	os_tid = 0x1674

	[0080.263] _alloca_probe () returned 0x40328a
	[0080.264] GetCurrentThreadId () returned 0x1674
	[0080.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x894
	[0080.264] GetFileSizeEx (in: hFile=0x894, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0080.264] CreateFileMappingA (hFile=0x894, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x898
	[0080.264] MapViewOfFile (hFileMappingObject=0x898, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.265] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.265] CloseHandle (hObject=0x898) returned 1
	[0080.265] GetCurrentThreadId () returned 0x1674
	[0080.265] FlushFileBuffers (hFile=0x894) returned 1
	[0080.267] CloseHandle (hObject=0x894) returned 1
	[0080.267] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 191
	[0080.267] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.268] free (_Block=0x3277890) 
	[0080.268] RtlExitUserThread (Status=0x0) 

Thread:
	id = 353
	os_tid = 0x1678

	[0080.270] _alloca_probe () returned 0x40328a
	[0080.270] GetCurrentThreadId () returned 0x1678
	[0080.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x898
	[0080.271] GetFileSizeEx (in: hFile=0x898, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=527973) returned 1
	[0080.271] CreateFileMappingA (hFile=0x898, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e69, lpName=0x0) returned 0x89c
	[0080.271] MapViewOfFile (hFileMappingObject=0x89c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0080.355] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0080.359] CloseHandle (hObject=0x89c) returned 1
	[0080.359] GetCurrentThreadId () returned 0x1678
	[0080.359] FlushFileBuffers (hFile=0x898) returned 1
	[0080.367] CloseHandle (hObject=0x898) returned 1
	[0080.368] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 191
	[0080.368] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.368] free (_Block=0x3275880) 
	[0080.368] RtlExitUserThread (Status=0x0) 

Thread:
	id = 354
	os_tid = 0x167c

	[0080.418] _alloca_probe () returned 0x40328a
	[0080.418] GetCurrentThreadId () returned 0x167c
	[0080.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x89c
	[0080.419] GetFileSizeEx (in: hFile=0x89c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1281) returned 1
	[0080.419] CreateFileMappingA (hFile=0x89c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8a0
	[0080.419] MapViewOfFile (hFileMappingObject=0x8a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0080.420] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0080.420] CloseHandle (hObject=0x8a0) returned 1
	[0080.420] GetCurrentThreadId () returned 0x167c
	[0080.420] FlushFileBuffers (hFile=0x89c) returned 1
	[0080.421] CloseHandle (hObject=0x89c) returned 1
	[0080.422] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 191
	[0080.422] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.422] free (_Block=0x3274878) 
	[0080.422] RtlExitUserThread (Status=0x0) 

Thread:
	id = 355
	os_tid = 0x1680

	[0080.424] _alloca_probe () returned 0x40328a
	[0080.425] GetCurrentThreadId () returned 0x1680
	[0080.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0080.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a0
	[0080.425] GetFileSizeEx (in: hFile=0x8a0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3401) returned 1
	[0080.425] CreateFileMappingA (hFile=0x8a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd51, lpName=0x0) returned 0x8a4
	[0080.425] MapViewOfFile (hFileMappingObject=0x8a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.428] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.428] CloseHandle (hObject=0x8a4) returned 1
	[0080.428] GetCurrentThreadId () returned 0x1680
	[0080.428] FlushFileBuffers (hFile=0x8a0) returned 1
	[0080.430] CloseHandle (hObject=0x8a0) returned 1
	[0080.430] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 191
	[0080.430] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.431] free (_Block=0x327b8b0) 
	[0080.431] RtlExitUserThread (Status=0x0) 

Thread:
	id = 356
	os_tid = 0x1684

	[0080.433] _alloca_probe () returned 0x40328a
	[0080.434] GetCurrentThreadId () returned 0x1684
	[0080.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", dwFileAttributes=0x80) returned 1
	[0080.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4
	[0080.434] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2173061) returned 1
	[0080.434] CreateFileMappingA (hFile=0x8a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x212889, lpName=0x0) returned 0x8a8
	[0080.434] MapViewOfFile (hFileMappingObject=0x8a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0080.877] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0080.897] CloseHandle (hObject=0x8a8) returned 1
	[0080.897] GetCurrentThreadId () returned 0x1684
	[0080.897] FlushFileBuffers (hFile=0x8a4) returned 1
	[0080.901] CloseHandle (hObject=0x8a4) returned 1
	[0080.901] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 161
	[0080.901] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml")) returned 1
	[0080.902] free (_Block=0x327b8b0) 
	[0080.902] RtlExitUserThread (Status=0x0) 

Thread:
	id = 357
	os_tid = 0x1688

	[0080.906] _alloca_probe () returned 0x40328a
	[0080.906] GetCurrentThreadId () returned 0x1688
	[0080.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0080.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a8
	[0080.907] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9849) returned 1
	[0080.907] CreateFileMappingA (hFile=0x8a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2681, lpName=0x0) returned 0x8ac
	[0080.907] MapViewOfFile (hFileMappingObject=0x8ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.909] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.909] CloseHandle (hObject=0x8ac) returned 1
	[0080.909] GetCurrentThreadId () returned 0x1688
	[0080.909] FlushFileBuffers (hFile=0x8a8) returned 1
	[0080.911] CloseHandle (hObject=0x8a8) returned 1
	[0080.911] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 163
	[0080.911] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0080.913] free (_Block=0x327b8b0) 
	[0080.913] RtlExitUserThread (Status=0x0) 

Thread:
	id = 358
	os_tid = 0x168c

	[0080.915] _alloca_probe () returned 0x40328a
	[0080.915] GetCurrentThreadId () returned 0x168c
	[0080.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0080.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8ac
	[0080.915] GetFileSizeEx (in: hFile=0x8ac, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=385) returned 1
	[0080.915] CreateFileMappingA (hFile=0x8ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181, lpName=0x0) returned 0x8b0
	[0080.916] MapViewOfFile (hFileMappingObject=0x8b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0080.916] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0080.916] CloseHandle (hObject=0x8b0) returned 1
	[0080.916] GetCurrentThreadId () returned 0x168c
	[0080.916] FlushFileBuffers (hFile=0x8ac) returned 1
	[0081.002] CloseHandle (hObject=0x8ac) returned 1
	[0081.002] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 160
	[0081.002] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0081.003] free (_Block=0x32798a0) 
	[0081.003] RtlExitUserThread (Status=0x0) 

Thread:
	id = 359
	os_tid = 0x1690

	[0081.005] _alloca_probe () returned 0x40328a
	[0081.006] GetCurrentThreadId () returned 0x1690
	[0081.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b0
	[0081.006] GetFileSizeEx (in: hFile=0x8b0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=387385) returned 1
	[0081.006] CreateFileMappingA (hFile=0x8b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e941, lpName=0x0) returned 0x8b4
	[0081.006] MapViewOfFile (hFileMappingObject=0x8b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0081.074] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0081.078] CloseHandle (hObject=0x8b4) returned 1
	[0081.078] GetCurrentThreadId () returned 0x1690
	[0081.078] FlushFileBuffers (hFile=0x8b0) returned 1
	[0081.082] CloseHandle (hObject=0x8b0) returned 1
	[0081.083] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 220
	[0081.083] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0081.084] free (_Block=0x3275880) 
	[0081.084] RtlExitUserThread (Status=0x0) 

Thread:
	id = 360
	os_tid = 0x1694

	[0081.087] _alloca_probe () returned 0x40328a
	[0081.087] GetCurrentThreadId () returned 0x1694
	[0081.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4
	[0081.088] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1553) returned 1
	[0081.088] CreateFileMappingA (hFile=0x8b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x611, lpName=0x0) returned 0x8b8
	[0081.088] MapViewOfFile (hFileMappingObject=0x8b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0081.089] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0081.089] CloseHandle (hObject=0x8b8) returned 1
	[0081.089] GetCurrentThreadId () returned 0x1694
	[0081.089] FlushFileBuffers (hFile=0x8b4) returned 1
	[0081.090] CloseHandle (hObject=0x8b4) returned 1
	[0081.091] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 220
	[0081.091] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0081.091] free (_Block=0x32798a0) 
	[0081.091] RtlExitUserThread (Status=0x0) 

Thread:
	id = 361
	os_tid = 0x1698

	[0081.093] _alloca_probe () returned 0x40328a
	[0081.094] GetCurrentThreadId () returned 0x1698
	[0081.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b8
	[0081.094] GetFileSizeEx (in: hFile=0x8b8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=800881) returned 1
	[0081.094] CreateFileMappingA (hFile=0x8b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3871, lpName=0x0) returned 0x8bc
	[0081.095] MapViewOfFile (hFileMappingObject=0x8bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0081.220] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0081.227] CloseHandle (hObject=0x8bc) returned 1
	[0081.227] GetCurrentThreadId () returned 0x1698
	[0081.227] FlushFileBuffers (hFile=0x8b8) returned 1
	[0081.229] CloseHandle (hObject=0x8b8) returned 1
	[0081.230] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 220
	[0081.230] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0081.230] free (_Block=0x3276888) 
	[0081.230] RtlExitUserThread (Status=0x0) 

Thread:
	id = 362
	os_tid = 0x169c

	[0081.271] _alloca_probe () returned 0x40328a
	[0081.271] GetCurrentThreadId () returned 0x169c
	[0081.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8bc
	[0081.272] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0081.272] CreateFileMappingA (hFile=0x8bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8c0
	[0081.272] MapViewOfFile (hFileMappingObject=0x8c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0081.273] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0081.273] CloseHandle (hObject=0x8c0) returned 1
	[0081.273] GetCurrentThreadId () returned 0x169c
	[0081.273] FlushFileBuffers (hFile=0x8bc) returned 1
	[0081.278] CloseHandle (hObject=0x8bc) returned 1
	[0081.278] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 220
	[0081.278] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0081.279] free (_Block=0x32798a0) 
	[0081.279] RtlExitUserThread (Status=0x0) 

Thread:
	id = 363
	os_tid = 0x16a0

	[0081.281] _alloca_probe () returned 0x40328a
	[0081.282] GetCurrentThreadId () returned 0x16a0
	[0081.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c0
	[0081.282] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=496513) returned 1
	[0081.282] CreateFileMappingA (hFile=0x8c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0x8c4
	[0081.282] MapViewOfFile (hFileMappingObject=0x8c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0081.363] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0081.367] CloseHandle (hObject=0x8c4) returned 1
	[0081.367] GetCurrentThreadId () returned 0x16a0
	[0081.367] FlushFileBuffers (hFile=0x8c0) returned 1
	[0081.416] CloseHandle (hObject=0x8c0) returned 1
	[0081.416] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 220
	[0081.416] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0081.463] free (_Block=0x327a8a8) 
	[0081.463] RtlExitUserThread (Status=0x0) 

Thread:
	id = 364
	os_tid = 0x16a4

	[0081.465] _alloca_probe () returned 0x40328a
	[0081.465] GetCurrentThreadId () returned 0x16a4
	[0081.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c4
	[0081.466] GetFileSizeEx (in: hFile=0x8c4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0081.466] CreateFileMappingA (hFile=0x8c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8c8
	[0081.466] MapViewOfFile (hFileMappingObject=0x8c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0081.467] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0081.467] CloseHandle (hObject=0x8c8) returned 1
	[0081.467] GetCurrentThreadId () returned 0x16a4
	[0081.467] FlushFileBuffers (hFile=0x8c4) returned 1
	[0081.469] CloseHandle (hObject=0x8c4) returned 1
	[0081.469] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 220
	[0081.469] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0081.470] free (_Block=0x3277890) 
	[0081.470] RtlExitUserThread (Status=0x0) 

Thread:
	id = 365
	os_tid = 0x16a8

	[0081.472] _alloca_probe () returned 0x40328a
	[0081.472] GetCurrentThreadId () returned 0x16a8
	[0081.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c8
	[0081.472] GetFileSizeEx (in: hFile=0x8c8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=253712) returned 1
	[0081.472] CreateFileMappingA (hFile=0x8c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x8cc
	[0081.472] MapViewOfFile (hFileMappingObject=0x8cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0081.513] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0081.515] CloseHandle (hObject=0x8cc) returned 1
	[0081.515] GetCurrentThreadId () returned 0x16a8
	[0081.515] FlushFileBuffers (hFile=0x8c8) returned 1
	[0081.517] CloseHandle (hObject=0x8c8) returned 1
	[0081.517] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 220
	[0081.517] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0081.518] free (_Block=0x3278898) 
	[0081.518] RtlExitUserThread (Status=0x0) 

Thread:
	id = 366
	os_tid = 0x16ac

	[0081.519] _alloca_probe () returned 0x40328a
	[0081.520] GetCurrentThreadId () returned 0x16ac
	[0081.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8cc
	[0081.520] GetFileSizeEx (in: hFile=0x8cc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0081.520] CreateFileMappingA (hFile=0x8cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8d0
	[0081.520] MapViewOfFile (hFileMappingObject=0x8d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0081.521] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0081.521] CloseHandle (hObject=0x8d0) returned 1
	[0081.521] GetCurrentThreadId () returned 0x16ac
	[0081.521] FlushFileBuffers (hFile=0x8cc) returned 1
	[0081.523] CloseHandle (hObject=0x8cc) returned 1
	[0081.523] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 220
	[0081.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0081.523] free (_Block=0x327a8a8) 
	[0081.523] RtlExitUserThread (Status=0x0) 

Thread:
	id = 367
	os_tid = 0x16b0

	[0081.578] _alloca_probe () returned 0x40328a
	[0081.578] GetCurrentThreadId () returned 0x16b0
	[0081.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d0
	[0081.579] GetFileSizeEx (in: hFile=0x8d0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1124969) returned 1
	[0081.579] CreateFileMappingA (hFile=0x8d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a71, lpName=0x0) returned 0x8d4
	[0081.579] MapViewOfFile (hFileMappingObject=0x8d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0081.755] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0081.764] CloseHandle (hObject=0x8d4) returned 1
	[0081.764] GetCurrentThreadId () returned 0x16b0
	[0081.764] FlushFileBuffers (hFile=0x8d0) returned 1
	[0081.770] CloseHandle (hObject=0x8d0) returned 1
	[0081.771] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 220
	[0081.771] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0081.771] free (_Block=0x3277890) 
	[0081.771] RtlExitUserThread (Status=0x0) 

Thread:
	id = 368
	os_tid = 0x16b4

	[0081.766] _alloca_probe () returned 0x40328a
	[0081.767] GetCurrentThreadId () returned 0x16b4
	[0081.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d8
	[0081.770] GetFileSizeEx (in: hFile=0x8d8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=19473) returned 1
	[0081.770] CreateFileMappingA (hFile=0x8d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c11, lpName=0x0) returned 0x8dc
	[0081.770] MapViewOfFile (hFileMappingObject=0x8dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0081.775] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0081.775] CloseHandle (hObject=0x8dc) returned 1
	[0081.775] GetCurrentThreadId () returned 0x16b4
	[0081.775] FlushFileBuffers (hFile=0x8d8) returned 1
	[0081.777] CloseHandle (hObject=0x8d8) returned 1
	[0081.777] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 220
	[0081.777] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0081.778] free (_Block=0x3274878) 
	[0081.778] RtlExitUserThread (Status=0x0) 

Thread:
	id = 369
	os_tid = 0x16b8

	[0081.780] _alloca_probe () returned 0x40328a
	[0081.780] GetCurrentThreadId () returned 0x16b8
	[0081.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8dc
	[0081.781] GetFileSizeEx (in: hFile=0x8dc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=763377) returned 1
	[0081.781] CreateFileMappingA (hFile=0x8dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5f1, lpName=0x0) returned 0x8d0
	[0081.781] MapViewOfFile (hFileMappingObject=0x8d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0081.901] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0081.908] CloseHandle (hObject=0x8d0) returned 1
	[0081.908] GetCurrentThreadId () returned 0x16b8
	[0081.908] FlushFileBuffers (hFile=0x8dc) returned 1
	[0081.910] CloseHandle (hObject=0x8dc) returned 1
	[0081.911] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 220
	[0081.911] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0081.911] free (_Block=0x3274878) 
	[0081.912] RtlExitUserThread (Status=0x0) 

Thread:
	id = 370
	os_tid = 0x16bc

	[0081.914] _alloca_probe () returned 0x40328a
	[0081.914] GetCurrentThreadId () returned 0x16bc
	[0081.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0081.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d0
	[0081.915] GetFileSizeEx (in: hFile=0x8d0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0081.915] CreateFileMappingA (hFile=0x8d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8e0
	[0081.915] MapViewOfFile (hFileMappingObject=0x8e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0081.916] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0081.916] CloseHandle (hObject=0x8e0) returned 1
	[0081.916] GetCurrentThreadId () returned 0x16bc
	[0081.916] FlushFileBuffers (hFile=0x8d0) returned 1
	[0081.918] CloseHandle (hObject=0x8d0) returned 1
	[0081.918] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 220
	[0081.918] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0081.919] free (_Block=0x327a8a8) 
	[0081.919] RtlExitUserThread (Status=0x0) 

Thread:
	id = 371
	os_tid = 0x16c0

	[0081.921] _alloca_probe () returned 0x40328a
	[0082.022] GetCurrentThreadId () returned 0x16c0
	[0082.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e0
	[0082.023] GetFileSizeEx (in: hFile=0x8e0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.023] CreateFileMappingA (hFile=0x8e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8e4
	[0082.023] MapViewOfFile (hFileMappingObject=0x8e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.024] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.024] CloseHandle (hObject=0x8e4) returned 1
	[0082.024] GetCurrentThreadId () returned 0x16c0
	[0082.024] FlushFileBuffers (hFile=0x8e0) returned 1
	[0082.026] CloseHandle (hObject=0x8e0) returned 1
	[0082.026] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 220
	[0082.026] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.027] free (_Block=0x3275880) 
	[0082.027] RtlExitUserThread (Status=0x0) 

Thread:
	id = 372
	os_tid = 0x16c4

	[0082.030] _alloca_probe () returned 0x40328a
	[0082.030] GetCurrentThreadId () returned 0x16c4
	[0082.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e4
	[0082.031] GetFileSizeEx (in: hFile=0x8e4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2161) returned 1
	[0082.031] CreateFileMappingA (hFile=0x8e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x8e8
	[0082.031] MapViewOfFile (hFileMappingObject=0x8e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.032] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.032] CloseHandle (hObject=0x8e8) returned 1
	[0082.032] GetCurrentThreadId () returned 0x16c4
	[0082.032] FlushFileBuffers (hFile=0x8e4) returned 1
	[0082.034] CloseHandle (hObject=0x8e4) returned 1
	[0082.034] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 220
	[0082.035] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0082.035] free (_Block=0x3274878) 
	[0082.035] RtlExitUserThread (Status=0x0) 

Thread:
	id = 373
	os_tid = 0x16c8

	[0082.038] _alloca_probe () returned 0x40328a
	[0082.038] GetCurrentThreadId () returned 0x16c8
	[0082.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e8
	[0082.038] GetFileSizeEx (in: hFile=0x8e8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2161) returned 1
	[0082.039] CreateFileMappingA (hFile=0x8e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x8ec
	[0082.039] MapViewOfFile (hFileMappingObject=0x8ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.040] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.040] CloseHandle (hObject=0x8ec) returned 1
	[0082.040] GetCurrentThreadId () returned 0x16c8
	[0082.040] FlushFileBuffers (hFile=0x8e8) returned 1
	[0082.044] CloseHandle (hObject=0x8e8) returned 1
	[0082.045] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 220
	[0082.045] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0082.046] free (_Block=0x3274878) 
	[0082.046] RtlExitUserThread (Status=0x0) 

Thread:
	id = 374
	os_tid = 0x16cc

	[0082.049] _alloca_probe () returned 0x40328a
	[0082.049] GetCurrentThreadId () returned 0x16cc
	[0082.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8ec
	[0082.050] GetFileSizeEx (in: hFile=0x8ec, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=215905) returned 1
	[0082.050] CreateFileMappingA (hFile=0x8ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b61, lpName=0x0) returned 0x8f0
	[0082.050] MapViewOfFile (hFileMappingObject=0x8f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0082.087] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0082.089] CloseHandle (hObject=0x8f0) returned 1
	[0082.089] GetCurrentThreadId () returned 0x16cc
	[0082.089] FlushFileBuffers (hFile=0x8ec) returned 1
	[0082.091] CloseHandle (hObject=0x8ec) returned 1
	[0082.091] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 220
	[0082.091] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.093] free (_Block=0x327b8b0) 
	[0082.093] RtlExitUserThread (Status=0x0) 

Thread:
	id = 375
	os_tid = 0x16d0

	[0082.096] _alloca_probe () returned 0x40328a
	[0082.097] GetCurrentThreadId () returned 0x16d0
	[0082.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f0
	[0082.097] GetFileSizeEx (in: hFile=0x8f0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.097] CreateFileMappingA (hFile=0x8f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8f4
	[0082.097] MapViewOfFile (hFileMappingObject=0x8f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.098] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.098] CloseHandle (hObject=0x8f4) returned 1
	[0082.098] GetCurrentThreadId () returned 0x16d0
	[0082.098] FlushFileBuffers (hFile=0x8f0) returned 1
	[0082.101] CloseHandle (hObject=0x8f0) returned 1
	[0082.101] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 220
	[0082.101] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.102] free (_Block=0x32798a0) 
	[0082.102] RtlExitUserThread (Status=0x0) 

Thread:
	id = 376
	os_tid = 0x16d4

	[0082.104] _alloca_probe () returned 0x40328a
	[0082.105] GetCurrentThreadId () returned 0x16d4
	[0082.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f4
	[0082.105] GetFileSizeEx (in: hFile=0x8f4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.105] CreateFileMappingA (hFile=0x8f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8f8
	[0082.105] MapViewOfFile (hFileMappingObject=0x8f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.106] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.106] CloseHandle (hObject=0x8f8) returned 1
	[0082.106] GetCurrentThreadId () returned 0x16d4
	[0082.106] FlushFileBuffers (hFile=0x8f4) returned 1
	[0082.109] CloseHandle (hObject=0x8f4) returned 1
	[0082.109] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 220
	[0082.109] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.110] free (_Block=0x327a8a8) 
	[0082.110] RtlExitUserThread (Status=0x0) 

Thread:
	id = 377
	os_tid = 0x16d8

	[0082.112] _alloca_probe () returned 0x40328a
	[0082.113] GetCurrentThreadId () returned 0x16d8
	[0082.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f8
	[0082.113] GetFileSizeEx (in: hFile=0x8f8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=343329) returned 1
	[0082.113] CreateFileMappingA (hFile=0x8f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0x8fc
	[0082.113] MapViewOfFile (hFileMappingObject=0x8fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0082.170] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0082.173] CloseHandle (hObject=0x8fc) returned 1
	[0082.173] GetCurrentThreadId () returned 0x16d8
	[0082.173] FlushFileBuffers (hFile=0x8f8) returned 1
	[0082.175] CloseHandle (hObject=0x8f8) returned 1
	[0082.175] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 220
	[0082.175] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.176] free (_Block=0x3278898) 
	[0082.176] RtlExitUserThread (Status=0x0) 

Thread:
	id = 378
	os_tid = 0x16dc

	[0082.177] _alloca_probe () returned 0x40328a
	[0082.178] GetCurrentThreadId () returned 0x16dc
	[0082.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8fc
	[0082.178] GetFileSizeEx (in: hFile=0x8fc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=14913) returned 1
	[0082.178] CreateFileMappingA (hFile=0x8fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0x900
	[0082.178] MapViewOfFile (hFileMappingObject=0x900, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.181] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.182] CloseHandle (hObject=0x900) returned 1
	[0082.182] GetCurrentThreadId () returned 0x16dc
	[0082.182] FlushFileBuffers (hFile=0x8fc) returned 1
	[0082.185] CloseHandle (hObject=0x8fc) returned 1
	[0082.185] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 220
	[0082.185] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.186] free (_Block=0x32798a0) 
	[0082.186] RtlExitUserThread (Status=0x0) 

Thread:
	id = 379
	os_tid = 0x16e0

	[0082.187] _alloca_probe () returned 0x40328a
	[0082.188] GetCurrentThreadId () returned 0x16e0
	[0082.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x900
	[0082.188] GetFileSizeEx (in: hFile=0x900, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=357361) returned 1
	[0082.188] CreateFileMappingA (hFile=0x900, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573f1, lpName=0x0) returned 0x904
	[0082.188] MapViewOfFile (hFileMappingObject=0x904, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0082.248] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0082.251] CloseHandle (hObject=0x904) returned 1
	[0082.251] GetCurrentThreadId () returned 0x16e0
	[0082.251] FlushFileBuffers (hFile=0x900) returned 1
	[0082.253] CloseHandle (hObject=0x900) returned 1
	[0082.253] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 220
	[0082.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.254] free (_Block=0x3278898) 
	[0082.254] RtlExitUserThread (Status=0x0) 

Thread:
	id = 380
	os_tid = 0x16e4

	[0082.255] _alloca_probe () returned 0x40328a
	[0082.256] GetCurrentThreadId () returned 0x16e4
	[0082.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x904
	[0082.256] GetFileSizeEx (in: hFile=0x904, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.256] CreateFileMappingA (hFile=0x904, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x908
	[0082.256] MapViewOfFile (hFileMappingObject=0x908, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.257] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.257] CloseHandle (hObject=0x908) returned 1
	[0082.257] GetCurrentThreadId () returned 0x16e4
	[0082.257] FlushFileBuffers (hFile=0x904) returned 1
	[0082.259] CloseHandle (hObject=0x904) returned 1
	[0082.259] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 220
	[0082.259] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.260] free (_Block=0x32798a0) 
	[0082.260] RtlExitUserThread (Status=0x0) 

Thread:
	id = 381
	os_tid = 0x16e8

	[0082.262] _alloca_probe () returned 0x40328a
	[0082.263] GetCurrentThreadId () returned 0x16e8
	[0082.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x908
	[0082.263] GetFileSizeEx (in: hFile=0x908, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=65017) returned 1
	[0082.263] CreateFileMappingA (hFile=0x908, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfe01, lpName=0x0) returned 0x90c
	[0082.263] MapViewOfFile (hFileMappingObject=0x90c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.275] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.275] CloseHandle (hObject=0x90c) returned 1
	[0082.275] GetCurrentThreadId () returned 0x16e8
	[0082.275] FlushFileBuffers (hFile=0x908) returned 1
	[0082.277] CloseHandle (hObject=0x908) returned 1
	[0082.278] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 220
	[0082.278] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.278] free (_Block=0x3277890) 
	[0082.278] RtlExitUserThread (Status=0x0) 

Thread:
	id = 382
	os_tid = 0x16ec

	[0082.280] _alloca_probe () returned 0x40328a
	[0082.281] GetCurrentThreadId () returned 0x16ec
	[0082.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90c
	[0082.281] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.281] CreateFileMappingA (hFile=0x90c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x910
	[0082.281] MapViewOfFile (hFileMappingObject=0x910, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.282] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.282] CloseHandle (hObject=0x910) returned 1
	[0082.282] GetCurrentThreadId () returned 0x16ec
	[0082.282] FlushFileBuffers (hFile=0x90c) returned 1
	[0082.284] CloseHandle (hObject=0x90c) returned 1
	[0082.284] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 220
	[0082.284] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.288] free (_Block=0x3274878) 
	[0082.288] RtlExitUserThread (Status=0x0) 

Thread:
	id = 383
	os_tid = 0x16f0

	[0082.290] _alloca_probe () returned 0x40328a
	[0082.290] GetCurrentThreadId () returned 0x16f0
	[0082.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x910
	[0082.290] GetFileSizeEx (in: hFile=0x910, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.291] CreateFileMappingA (hFile=0x910, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x914
	[0082.291] MapViewOfFile (hFileMappingObject=0x914, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.291] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.291] CloseHandle (hObject=0x914) returned 1
	[0082.292] GetCurrentThreadId () returned 0x16f0
	[0082.292] FlushFileBuffers (hFile=0x910) returned 1
	[0082.294] CloseHandle (hObject=0x910) returned 1
	[0082.294] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 220
	[0082.294] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.295] free (_Block=0x3274878) 
	[0082.295] RtlExitUserThread (Status=0x0) 

Thread:
	id = 384
	os_tid = 0x16f4

	[0082.297] _alloca_probe () returned 0x40328a
	[0082.297] GetCurrentThreadId () returned 0x16f4
	[0082.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x914
	[0082.297] GetFileSizeEx (in: hFile=0x914, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9216) returned 1
	[0082.297] CreateFileMappingA (hFile=0x914, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0x918
	[0082.298] MapViewOfFile (hFileMappingObject=0x918, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.300] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.300] CloseHandle (hObject=0x918) returned 1
	[0082.300] GetCurrentThreadId () returned 0x16f4
	[0082.300] FlushFileBuffers (hFile=0x914) returned 1
	[0082.302] CloseHandle (hObject=0x914) returned 1
	[0082.302] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 220
	[0082.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.303] free (_Block=0x3277890) 
	[0082.303] RtlExitUserThread (Status=0x0) 

Thread:
	id = 385
	os_tid = 0x16f8

	[0082.304] _alloca_probe () returned 0x40328a
	[0082.305] GetCurrentThreadId () returned 0x16f8
	[0082.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x918
	[0082.305] GetFileSizeEx (in: hFile=0x918, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.305] CreateFileMappingA (hFile=0x918, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x91c
	[0082.305] MapViewOfFile (hFileMappingObject=0x91c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.306] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.306] CloseHandle (hObject=0x91c) returned 1
	[0082.306] GetCurrentThreadId () returned 0x16f8
	[0082.306] FlushFileBuffers (hFile=0x918) returned 1
	[0082.307] CloseHandle (hObject=0x918) returned 1
	[0082.308] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 220
	[0082.308] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.308] free (_Block=0x3275880) 
	[0082.308] RtlExitUserThread (Status=0x0) 

Thread:
	id = 386
	os_tid = 0x16fc

	[0082.310] _alloca_probe () returned 0x40328a
	[0082.311] GetCurrentThreadId () returned 0x16fc
	[0082.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c
	[0082.311] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=399561) returned 1
	[0082.311] CreateFileMappingA (hFile=0x91c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618d1, lpName=0x0) returned 0x920
	[0082.311] MapViewOfFile (hFileMappingObject=0x920, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0082.378] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0082.381] CloseHandle (hObject=0x920) returned 1
	[0082.381] GetCurrentThreadId () returned 0x16fc
	[0082.381] FlushFileBuffers (hFile=0x91c) returned 1
	[0082.383] CloseHandle (hObject=0x91c) returned 1
	[0082.383] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 220
	[0082.384] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.384] free (_Block=0x327a8a8) 
	[0082.384] RtlExitUserThread (Status=0x0) 

Thread:
	id = 387
	os_tid = 0x1700

	[0082.478] _alloca_probe () returned 0x40328a
	[0082.479] GetCurrentThreadId () returned 0x1700
	[0082.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x920
	[0082.479] GetFileSizeEx (in: hFile=0x920, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.479] CreateFileMappingA (hFile=0x920, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x924
	[0082.479] MapViewOfFile (hFileMappingObject=0x924, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.480] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.480] CloseHandle (hObject=0x924) returned 1
	[0082.480] GetCurrentThreadId () returned 0x1700
	[0082.480] FlushFileBuffers (hFile=0x920) returned 1
	[0082.482] CloseHandle (hObject=0x920) returned 1
	[0082.482] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 220
	[0082.482] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.483] free (_Block=0x3276888) 
	[0082.483] RtlExitUserThread (Status=0x0) 

Thread:
	id = 388
	os_tid = 0x1704

	[0082.485] _alloca_probe () returned 0x40328a
	[0082.485] GetCurrentThreadId () returned 0x1704
	[0082.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x924
	[0082.486] GetFileSizeEx (in: hFile=0x924, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1465) returned 1
	[0082.486] CreateFileMappingA (hFile=0x924, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5c1, lpName=0x0) returned 0x928
	[0082.486] MapViewOfFile (hFileMappingObject=0x928, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.487] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.487] CloseHandle (hObject=0x928) returned 1
	[0082.487] GetCurrentThreadId () returned 0x1704
	[0082.487] FlushFileBuffers (hFile=0x924) returned 1
	[0082.491] CloseHandle (hObject=0x924) returned 1
	[0082.492] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 220
	[0082.492] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.492] free (_Block=0x3274878) 
	[0082.493] RtlExitUserThread (Status=0x0) 

Thread:
	id = 389
	os_tid = 0x1708

	[0082.540] _alloca_probe () returned 0x40328a
	[0082.540] GetCurrentThreadId () returned 0x1708
	[0082.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x928
	[0082.541] GetFileSizeEx (in: hFile=0x928, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1281) returned 1
	[0082.541] CreateFileMappingA (hFile=0x928, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x92c
	[0082.541] MapViewOfFile (hFileMappingObject=0x92c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0082.542] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0082.542] CloseHandle (hObject=0x92c) returned 1
	[0082.542] GetCurrentThreadId () returned 0x1708
	[0082.542] FlushFileBuffers (hFile=0x928) returned 1
	[0082.544] CloseHandle (hObject=0x928) returned 1
	[0082.544] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 220
	[0082.544] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.545] free (_Block=0x327b8b0) 
	[0082.545] RtlExitUserThread (Status=0x0) 

Thread:
	id = 390
	os_tid = 0x170c

	[0082.547] _alloca_probe () returned 0x40328a
	[0082.547] GetCurrentThreadId () returned 0x170c
	[0082.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x92c
	[0082.547] GetFileSizeEx (in: hFile=0x92c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3769) returned 1
	[0082.547] CreateFileMappingA (hFile=0x92c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xec1, lpName=0x0) returned 0x930
	[0082.547] MapViewOfFile (hFileMappingObject=0x930, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.549] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.549] CloseHandle (hObject=0x930) returned 1
	[0082.549] GetCurrentThreadId () returned 0x170c
	[0082.549] FlushFileBuffers (hFile=0x92c) returned 1
	[0082.551] CloseHandle (hObject=0x92c) returned 1
	[0082.551] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 220
	[0082.551] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.552] free (_Block=0x3276888) 
	[0082.552] RtlExitUserThread (Status=0x0) 

Thread:
	id = 391
	os_tid = 0x1710

	[0082.553] _alloca_probe () returned 0x40328a
	[0082.554] GetCurrentThreadId () returned 0x1710
	[0082.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x930
	[0082.554] GetFileSizeEx (in: hFile=0x930, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.554] CreateFileMappingA (hFile=0x930, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x934
	[0082.554] MapViewOfFile (hFileMappingObject=0x934, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.555] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.555] CloseHandle (hObject=0x934) returned 1
	[0082.555] GetCurrentThreadId () returned 0x1710
	[0082.555] FlushFileBuffers (hFile=0x930) returned 1
	[0082.558] CloseHandle (hObject=0x930) returned 1
	[0082.558] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 220
	[0082.558] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.559] free (_Block=0x3275880) 
	[0082.559] RtlExitUserThread (Status=0x0) 

Thread:
	id = 392
	os_tid = 0x1714

	[0082.561] _alloca_probe () returned 0x40328a
	[0082.561] GetCurrentThreadId () returned 0x1714
	[0082.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x934
	[0082.561] GetFileSizeEx (in: hFile=0x934, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.561] CreateFileMappingA (hFile=0x934, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x938
	[0082.562] MapViewOfFile (hFileMappingObject=0x938, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.562] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.562] CloseHandle (hObject=0x938) returned 1
	[0082.562] GetCurrentThreadId () returned 0x1714
	[0082.563] FlushFileBuffers (hFile=0x934) returned 1
	[0082.565] CloseHandle (hObject=0x934) returned 1
	[0082.566] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 220
	[0082.566] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.566] free (_Block=0x3278898) 
	[0082.566] RtlExitUserThread (Status=0x0) 

Thread:
	id = 393
	os_tid = 0x1718

	[0082.568] _alloca_probe () returned 0x40328a
	[0082.568] GetCurrentThreadId () returned 0x1718
	[0082.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x938
	[0082.569] GetFileSizeEx (in: hFile=0x938, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.569] CreateFileMappingA (hFile=0x938, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x93c
	[0082.569] MapViewOfFile (hFileMappingObject=0x93c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.570] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.570] CloseHandle (hObject=0x93c) returned 1
	[0082.570] GetCurrentThreadId () returned 0x1718
	[0082.570] FlushFileBuffers (hFile=0x938) returned 1
	[0082.573] CloseHandle (hObject=0x938) returned 1
	[0082.573] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 220
	[0082.574] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.574] free (_Block=0x3274878) 
	[0082.574] RtlExitUserThread (Status=0x0) 

Thread:
	id = 394
	os_tid = 0x171c

	[0082.575] _alloca_probe () returned 0x40328a
	[0082.576] GetCurrentThreadId () returned 0x171c
	[0082.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x93c
	[0082.576] GetFileSizeEx (in: hFile=0x93c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=527977) returned 1
	[0082.576] CreateFileMappingA (hFile=0x93c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e71, lpName=0x0) returned 0x940
	[0082.576] MapViewOfFile (hFileMappingObject=0x940, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0082.662] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0082.667] CloseHandle (hObject=0x940) returned 1
	[0082.667] GetCurrentThreadId () returned 0x171c
	[0082.667] FlushFileBuffers (hFile=0x93c) returned 1
	[0082.669] CloseHandle (hObject=0x93c) returned 1
	[0082.669] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 220
	[0082.670] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.670] free (_Block=0x3276888) 
	[0082.670] RtlExitUserThread (Status=0x0) 

Thread:
	id = 395
	os_tid = 0x1720

	[0082.672] _alloca_probe () returned 0x40328a
	[0082.672] GetCurrentThreadId () returned 0x1720
	[0082.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x940
	[0082.672] GetFileSizeEx (in: hFile=0x940, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0082.672] CreateFileMappingA (hFile=0x940, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x944
	[0082.673] MapViewOfFile (hFileMappingObject=0x944, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.673] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.673] CloseHandle (hObject=0x944) returned 1
	[0082.673] GetCurrentThreadId () returned 0x1720
	[0082.673] FlushFileBuffers (hFile=0x940) returned 1
	[0082.675] CloseHandle (hObject=0x940) returned 1
	[0082.676] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 220
	[0082.676] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0082.676] free (_Block=0x32798a0) 
	[0082.676] RtlExitUserThread (Status=0x0) 

Thread:
	id = 396
	os_tid = 0x1724

	[0082.678] _alloca_probe () returned 0x40328a
	[0082.678] GetCurrentThreadId () returned 0x1724
	[0082.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0082.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x944
	[0082.679] GetFileSizeEx (in: hFile=0x944, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3409) returned 1
	[0082.679] CreateFileMappingA (hFile=0x944, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd51, lpName=0x0) returned 0x948
	[0082.679] MapViewOfFile (hFileMappingObject=0x948, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0082.680] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0082.680] CloseHandle (hObject=0x948) returned 1
	[0082.680] GetCurrentThreadId () returned 0x1724
	[0082.680] FlushFileBuffers (hFile=0x944) returned 1
	[0082.682] CloseHandle (hObject=0x944) returned 1
	[0082.682] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 220
	[0082.682] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0082.683] free (_Block=0x3278898) 
	[0082.683] RtlExitUserThread (Status=0x0) 

Thread:
	id = 397
	os_tid = 0x1728

	[0082.685] _alloca_probe () returned 0x40328a
	[0082.685] GetCurrentThreadId () returned 0x1728
	[0082.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", dwFileAttributes=0x80) returned 1
	[0082.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x948
	[0082.686] GetFileSizeEx (in: hFile=0x948, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2173065) returned 1
	[0082.686] CreateFileMappingA (hFile=0x948, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x212891, lpName=0x0) returned 0x94c
	[0082.686] MapViewOfFile (hFileMappingObject=0x94c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0083.133] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0083.152] CloseHandle (hObject=0x94c) returned 1
	[0083.152] GetCurrentThreadId () returned 0x1728
	[0083.152] FlushFileBuffers (hFile=0x948) returned 1
	[0083.158] CloseHandle (hObject=0x948) returned 1
	[0083.159] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 190
	[0083.159] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml")) returned 1
	[0083.160] free (_Block=0x3274878) 
	[0083.160] RtlExitUserThread (Status=0x0) 

Thread:
	id = 398
	os_tid = 0x172c

	[0083.161] _alloca_probe () returned 0x40328a
	[0083.162] GetCurrentThreadId () returned 0x172c
	[0083.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0083.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94c
	[0083.162] GetFileSizeEx (in: hFile=0x94c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9857) returned 1
	[0083.162] CreateFileMappingA (hFile=0x94c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2681, lpName=0x0) returned 0x950
	[0083.163] MapViewOfFile (hFileMappingObject=0x950, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0083.165] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0083.165] CloseHandle (hObject=0x950) returned 1
	[0083.165] GetCurrentThreadId () returned 0x172c
	[0083.165] FlushFileBuffers (hFile=0x94c) returned 1
	[0083.168] CloseHandle (hObject=0x94c) returned 1
	[0083.168] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 192
	[0083.168] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0083.169] free (_Block=0x32798a0) 
	[0083.169] RtlExitUserThread (Status=0x0) 

Thread:
	id = 399
	os_tid = 0x1730

	[0083.170] _alloca_probe () returned 0x40328a
	[0083.171] GetCurrentThreadId () returned 0x1730
	[0083.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0083.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x950
	[0083.171] GetFileSizeEx (in: hFile=0x950, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=385) returned 1
	[0083.171] CreateFileMappingA (hFile=0x950, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181, lpName=0x0) returned 0x954
	[0083.171] MapViewOfFile (hFileMappingObject=0x954, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0083.172] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0083.172] CloseHandle (hObject=0x954) returned 1
	[0083.172] GetCurrentThreadId () returned 0x1730
	[0083.172] FlushFileBuffers (hFile=0x950) returned 1
	[0083.173] CloseHandle (hObject=0x950) returned 1
	[0083.174] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 189
	[0083.174] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0083.176] free (_Block=0x3278898) 
	[0083.176] RtlExitUserThread (Status=0x0) 

Thread:
	id = 400
	os_tid = 0x1734

	[0083.177] _alloca_probe () returned 0x40328a
	[0083.178] GetCurrentThreadId () returned 0x1734
	[0083.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x954
	[0083.178] GetFileSizeEx (in: hFile=0x954, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=387393) returned 1
	[0083.178] CreateFileMappingA (hFile=0x954, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e941, lpName=0x0) returned 0x958
	[0083.178] MapViewOfFile (hFileMappingObject=0x958, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0083.242] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0083.245] CloseHandle (hObject=0x958) returned 1
	[0083.245] GetCurrentThreadId () returned 0x1734
	[0083.245] FlushFileBuffers (hFile=0x954) returned 1
	[0083.248] CloseHandle (hObject=0x954) returned 1
	[0083.249] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 249
	[0083.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0083.250] free (_Block=0x3274878) 
	[0083.250] RtlExitUserThread (Status=0x0) 

Thread:
	id = 401
	os_tid = 0x1738

	[0083.252] _alloca_probe () returned 0x40328a
	[0083.253] GetCurrentThreadId () returned 0x1738
	[0083.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x958
	[0083.253] GetFileSizeEx (in: hFile=0x958, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1553) returned 1
	[0083.253] CreateFileMappingA (hFile=0x958, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x611, lpName=0x0) returned 0x95c
	[0083.253] MapViewOfFile (hFileMappingObject=0x95c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0083.254] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0083.254] CloseHandle (hObject=0x95c) returned 1
	[0083.254] GetCurrentThreadId () returned 0x1738
	[0083.254] FlushFileBuffers (hFile=0x958) returned 1
	[0083.256] CloseHandle (hObject=0x958) returned 1
	[0083.256] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 249
	[0083.257] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0083.257] free (_Block=0x32798a0) 
	[0083.257] RtlExitUserThread (Status=0x0) 

Thread:
	id = 402
	os_tid = 0x173c

	[0083.259] _alloca_probe () returned 0x40328a
	[0083.260] GetCurrentThreadId () returned 0x173c
	[0083.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x95c
	[0083.260] GetFileSizeEx (in: hFile=0x95c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=800881) returned 1
	[0083.260] CreateFileMappingA (hFile=0x95c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3871, lpName=0x0) returned 0x960
	[0083.260] MapViewOfFile (hFileMappingObject=0x960, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0083.390] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0083.397] CloseHandle (hObject=0x960) returned 1
	[0083.397] GetCurrentThreadId () returned 0x173c
	[0083.397] FlushFileBuffers (hFile=0x95c) returned 1
	[0083.400] CloseHandle (hObject=0x95c) returned 1
	[0083.400] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 249
	[0083.400] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0083.411] free (_Block=0x3277890) 
	[0083.411] RtlExitUserThread (Status=0x0) 

Thread:
	id = 403
	os_tid = 0x1740

	[0083.413] _alloca_probe () returned 0x40328a
	[0083.413] GetCurrentThreadId () returned 0x1740
	[0083.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x960
	[0083.414] GetFileSizeEx (in: hFile=0x960, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0083.414] CreateFileMappingA (hFile=0x960, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x964
	[0083.414] MapViewOfFile (hFileMappingObject=0x964, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0083.415] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0083.415] CloseHandle (hObject=0x964) returned 1
	[0083.415] GetCurrentThreadId () returned 0x1740
	[0083.415] FlushFileBuffers (hFile=0x960) returned 1
	[0083.417] CloseHandle (hObject=0x960) returned 1
	[0083.418] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 249
	[0083.418] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0083.419] free (_Block=0x32798a0) 
	[0083.419] RtlExitUserThread (Status=0x0) 

Thread:
	id = 404
	os_tid = 0x1744

	[0083.421] _alloca_probe () returned 0x40328a
	[0083.421] GetCurrentThreadId () returned 0x1744
	[0083.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x964
	[0083.421] GetFileSizeEx (in: hFile=0x964, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=496513) returned 1
	[0083.421] CreateFileMappingA (hFile=0x964, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0x968
	[0083.421] MapViewOfFile (hFileMappingObject=0x968, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0083.502] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0083.507] CloseHandle (hObject=0x968) returned 1
	[0083.507] GetCurrentThreadId () returned 0x1744
	[0083.507] FlushFileBuffers (hFile=0x964) returned 1
	[0083.509] CloseHandle (hObject=0x964) returned 1
	[0083.509] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 249
	[0083.509] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0083.510] free (_Block=0x3274878) 
	[0083.510] RtlExitUserThread (Status=0x0) 

Thread:
	id = 405
	os_tid = 0x1748

	[0083.512] _alloca_probe () returned 0x40328a
	[0083.512] GetCurrentThreadId () returned 0x1748
	[0083.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x968
	[0083.513] GetFileSizeEx (in: hFile=0x968, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0083.513] CreateFileMappingA (hFile=0x968, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x96c
	[0083.513] MapViewOfFile (hFileMappingObject=0x96c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0083.514] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0083.514] CloseHandle (hObject=0x96c) returned 1
	[0083.514] GetCurrentThreadId () returned 0x1748
	[0083.514] FlushFileBuffers (hFile=0x968) returned 1
	[0083.516] CloseHandle (hObject=0x968) returned 1
	[0083.516] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 249
	[0083.516] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0083.517] free (_Block=0x3274878) 
	[0083.517] RtlExitUserThread (Status=0x0) 

Thread:
	id = 406
	os_tid = 0x174c

	[0083.519] _alloca_probe () returned 0x40328a
	[0083.519] GetCurrentThreadId () returned 0x174c
	[0083.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x96c
	[0083.519] GetFileSizeEx (in: hFile=0x96c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=253712) returned 1
	[0083.520] CreateFileMappingA (hFile=0x96c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x970
	[0083.520] MapViewOfFile (hFileMappingObject=0x970, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0083.561] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0083.563] CloseHandle (hObject=0x970) returned 1
	[0083.564] GetCurrentThreadId () returned 0x174c
	[0083.564] FlushFileBuffers (hFile=0x96c) returned 1
	[0083.566] CloseHandle (hObject=0x96c) returned 1
	[0083.566] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 249
	[0083.566] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0083.567] free (_Block=0x327b8b0) 
	[0083.567] RtlExitUserThread (Status=0x0) 

Thread:
	id = 407
	os_tid = 0x1750

	[0083.568] _alloca_probe () returned 0x40328a
	[0083.569] GetCurrentThreadId () returned 0x1750
	[0083.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x970
	[0083.569] GetFileSizeEx (in: hFile=0x970, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0083.569] CreateFileMappingA (hFile=0x970, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x974
	[0083.569] MapViewOfFile (hFileMappingObject=0x974, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0083.570] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0083.570] CloseHandle (hObject=0x974) returned 1
	[0083.570] GetCurrentThreadId () returned 0x1750
	[0083.570] FlushFileBuffers (hFile=0x970) returned 1
	[0083.572] CloseHandle (hObject=0x970) returned 1
	[0083.572] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 249
	[0083.572] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0083.573] free (_Block=0x32798a0) 
	[0083.573] RtlExitUserThread (Status=0x0) 

Thread:
	id = 408
	os_tid = 0x1754

	[0083.575] _alloca_probe () returned 0x40328a
	[0083.575] GetCurrentThreadId () returned 0x1754
	[0083.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x974
	[0083.576] GetFileSizeEx (in: hFile=0x974, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1124977) returned 1
	[0083.576] CreateFileMappingA (hFile=0x974, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a71, lpName=0x0) returned 0x978
	[0083.576] MapViewOfFile (hFileMappingObject=0x978, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0083.805] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0083.814] CloseHandle (hObject=0x978) returned 1
	[0083.814] GetCurrentThreadId () returned 0x1754
	[0083.814] FlushFileBuffers (hFile=0x974) returned 1
	[0083.820] CloseHandle (hObject=0x974) returned 1
	[0083.820] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 249
	[0083.820] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0083.821] free (_Block=0x327a8a8) 
	[0083.821] RtlExitUserThread (Status=0x0) 

Thread:
	id = 409
	os_tid = 0x1758

	[0083.870] _alloca_probe () returned 0x40328a
	[0083.871] GetCurrentThreadId () returned 0x1758
	[0083.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x978
	[0083.871] GetFileSizeEx (in: hFile=0x978, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=19473) returned 1
	[0083.871] CreateFileMappingA (hFile=0x978, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c11, lpName=0x0) returned 0x97c
	[0083.871] MapViewOfFile (hFileMappingObject=0x97c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0083.875] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0083.875] CloseHandle (hObject=0x97c) returned 1
	[0083.875] GetCurrentThreadId () returned 0x1758
	[0083.875] FlushFileBuffers (hFile=0x978) returned 1
	[0083.877] CloseHandle (hObject=0x978) returned 1
	[0083.877] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 249
	[0083.878] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0083.878] free (_Block=0x327b8b0) 
	[0083.878] RtlExitUserThread (Status=0x0) 

Thread:
	id = 410
	os_tid = 0x175c

	[0083.880] _alloca_probe () returned 0x40328a
	[0083.881] GetCurrentThreadId () returned 0x175c
	[0083.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0083.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x97c
	[0083.881] GetFileSizeEx (in: hFile=0x97c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=763377) returned 1
	[0083.881] CreateFileMappingA (hFile=0x97c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5f1, lpName=0x0) returned 0x980
	[0083.881] MapViewOfFile (hFileMappingObject=0x980, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0084.089] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0084.095] CloseHandle (hObject=0x980) returned 1
	[0084.095] GetCurrentThreadId () returned 0x175c
	[0084.095] FlushFileBuffers (hFile=0x97c) returned 1
	[0084.098] CloseHandle (hObject=0x97c) returned 1
	[0084.099] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 249
	[0084.099] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.099] free (_Block=0x32798a0) 
	[0084.100] RtlExitUserThread (Status=0x0) 

Thread:
	id = 411
	os_tid = 0x1760

	[0084.102] _alloca_probe () returned 0x40328a
	[0084.102] GetCurrentThreadId () returned 0x1760
	[0084.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x980
	[0084.103] GetFileSizeEx (in: hFile=0x980, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.103] CreateFileMappingA (hFile=0x980, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x984
	[0084.103] MapViewOfFile (hFileMappingObject=0x984, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.104] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.104] CloseHandle (hObject=0x984) returned 1
	[0084.104] GetCurrentThreadId () returned 0x1760
	[0084.104] FlushFileBuffers (hFile=0x980) returned 1
	[0084.106] CloseHandle (hObject=0x980) returned 1
	[0084.106] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 249
	[0084.106] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.107] free (_Block=0x3274878) 
	[0084.107] RtlExitUserThread (Status=0x0) 

Thread:
	id = 412
	os_tid = 0x1764

	[0084.109] _alloca_probe () returned 0x40328a
	[0084.109] GetCurrentThreadId () returned 0x1764
	[0084.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x984
	[0084.109] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.110] CreateFileMappingA (hFile=0x984, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x988
	[0084.110] MapViewOfFile (hFileMappingObject=0x988, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.110] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.110] CloseHandle (hObject=0x988) returned 1
	[0084.110] GetCurrentThreadId () returned 0x1764
	[0084.111] FlushFileBuffers (hFile=0x984) returned 1
	[0084.112] CloseHandle (hObject=0x984) returned 1
	[0084.112] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 249
	[0084.112] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.113] free (_Block=0x3278898) 
	[0084.113] RtlExitUserThread (Status=0x0) 

Thread:
	id = 413
	os_tid = 0x1768

	[0084.115] _alloca_probe () returned 0x40328a
	[0084.116] GetCurrentThreadId () returned 0x1768
	[0084.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x988
	[0084.116] GetFileSizeEx (in: hFile=0x988, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2161) returned 1
	[0084.116] CreateFileMappingA (hFile=0x988, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x98c
	[0084.116] MapViewOfFile (hFileMappingObject=0x98c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.117] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.117] CloseHandle (hObject=0x98c) returned 1
	[0084.117] GetCurrentThreadId () returned 0x1768
	[0084.117] FlushFileBuffers (hFile=0x988) returned 1
	[0084.120] CloseHandle (hObject=0x988) returned 1
	[0084.120] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 249
	[0084.120] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0084.121] free (_Block=0x327b8b0) 
	[0084.121] RtlExitUserThread (Status=0x0) 

Thread:
	id = 414
	os_tid = 0x176c

	[0084.123] _alloca_probe () returned 0x40328a
	[0084.123] GetCurrentThreadId () returned 0x176c
	[0084.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98c
	[0084.124] GetFileSizeEx (in: hFile=0x98c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2161) returned 1
	[0084.124] CreateFileMappingA (hFile=0x98c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x990
	[0084.124] MapViewOfFile (hFileMappingObject=0x990, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.125] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.125] CloseHandle (hObject=0x990) returned 1
	[0084.125] GetCurrentThreadId () returned 0x176c
	[0084.125] FlushFileBuffers (hFile=0x98c) returned 1
	[0084.126] CloseHandle (hObject=0x98c) returned 1
	[0084.127] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 249
	[0084.127] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0084.127] free (_Block=0x3275880) 
	[0084.127] RtlExitUserThread (Status=0x0) 

Thread:
	id = 415
	os_tid = 0x1770

	[0084.129] _alloca_probe () returned 0x40328a
	[0084.130] GetCurrentThreadId () returned 0x1770
	[0084.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x990
	[0084.130] GetFileSizeEx (in: hFile=0x990, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=215905) returned 1
	[0084.130] CreateFileMappingA (hFile=0x990, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b61, lpName=0x0) returned 0x994
	[0084.130] MapViewOfFile (hFileMappingObject=0x994, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0084.288] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0084.290] CloseHandle (hObject=0x994) returned 1
	[0084.290] GetCurrentThreadId () returned 0x1770
	[0084.290] FlushFileBuffers (hFile=0x990) returned 1
	[0084.292] CloseHandle (hObject=0x990) returned 1
	[0084.293] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 249
	[0084.293] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.293] free (_Block=0x3276888) 
	[0084.293] RtlExitUserThread (Status=0x0) 

Thread:
	id = 416
	os_tid = 0x1774

	[0084.296] _alloca_probe () returned 0x40328a
	[0084.296] GetCurrentThreadId () returned 0x1774
	[0084.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x994
	[0084.296] GetFileSizeEx (in: hFile=0x994, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.296] CreateFileMappingA (hFile=0x994, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x998
	[0084.297] MapViewOfFile (hFileMappingObject=0x998, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.297] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.297] CloseHandle (hObject=0x998) returned 1
	[0084.297] GetCurrentThreadId () returned 0x1774
	[0084.298] FlushFileBuffers (hFile=0x994) returned 1
	[0084.299] CloseHandle (hObject=0x994) returned 1
	[0084.300] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 249
	[0084.300] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.300] free (_Block=0x3276888) 
	[0084.300] RtlExitUserThread (Status=0x0) 

Thread:
	id = 417
	os_tid = 0x1778

	[0084.302] _alloca_probe () returned 0x40328a
	[0084.303] GetCurrentThreadId () returned 0x1778
	[0084.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x998
	[0084.303] GetFileSizeEx (in: hFile=0x998, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.303] CreateFileMappingA (hFile=0x998, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x99c
	[0084.303] MapViewOfFile (hFileMappingObject=0x99c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.304] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.304] CloseHandle (hObject=0x99c) returned 1
	[0084.304] GetCurrentThreadId () returned 0x1778
	[0084.304] FlushFileBuffers (hFile=0x998) returned 1
	[0084.306] CloseHandle (hObject=0x998) returned 1
	[0084.307] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 249
	[0084.307] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.307] free (_Block=0x327b8b0) 
	[0084.307] RtlExitUserThread (Status=0x0) 

Thread:
	id = 418
	os_tid = 0x177c

	[0084.309] _alloca_probe () returned 0x40328a
	[0084.310] GetCurrentThreadId () returned 0x177c
	[0084.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x99c
	[0084.310] GetFileSizeEx (in: hFile=0x99c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=343329) returned 1
	[0084.310] CreateFileMappingA (hFile=0x99c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0x9a0
	[0084.310] MapViewOfFile (hFileMappingObject=0x9a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0084.369] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0084.372] CloseHandle (hObject=0x9a0) returned 1
	[0084.372] GetCurrentThreadId () returned 0x177c
	[0084.372] FlushFileBuffers (hFile=0x99c) returned 1
	[0084.377] CloseHandle (hObject=0x99c) returned 1
	[0084.377] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 249
	[0084.377] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.378] free (_Block=0x327b8b0) 
	[0084.378] RtlExitUserThread (Status=0x0) 

Thread:
	id = 419
	os_tid = 0x1780

	[0084.379] _alloca_probe () returned 0x40328a
	[0084.379] GetCurrentThreadId () returned 0x1780
	[0084.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9a0
	[0084.380] GetFileSizeEx (in: hFile=0x9a0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=14913) returned 1
	[0084.380] CreateFileMappingA (hFile=0x9a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0x9a4
	[0084.380] MapViewOfFile (hFileMappingObject=0x9a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0084.383] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0084.383] CloseHandle (hObject=0x9a4) returned 1
	[0084.383] GetCurrentThreadId () returned 0x1780
	[0084.383] FlushFileBuffers (hFile=0x9a0) returned 1
	[0084.385] CloseHandle (hObject=0x9a0) returned 1
	[0084.385] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 249
	[0084.385] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.386] free (_Block=0x3276888) 
	[0084.386] RtlExitUserThread (Status=0x0) 

Thread:
	id = 420
	os_tid = 0x1784

	[0084.388] _alloca_probe () returned 0x40328a
	[0084.388] GetCurrentThreadId () returned 0x1784
	[0084.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9a4
	[0084.389] GetFileSizeEx (in: hFile=0x9a4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=357361) returned 1
	[0084.389] CreateFileMappingA (hFile=0x9a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573f1, lpName=0x0) returned 0x9a8
	[0084.389] MapViewOfFile (hFileMappingObject=0x9a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0084.448] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0084.451] CloseHandle (hObject=0x9a8) returned 1
	[0084.452] GetCurrentThreadId () returned 0x1784
	[0084.452] FlushFileBuffers (hFile=0x9a4) returned 1
	[0084.453] CloseHandle (hObject=0x9a4) returned 1
	[0084.454] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 249
	[0084.454] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.455] free (_Block=0x3277890) 
	[0084.455] RtlExitUserThread (Status=0x0) 

Thread:
	id = 421
	os_tid = 0x1788

	[0084.458] _alloca_probe () returned 0x40328a
	[0084.458] GetCurrentThreadId () returned 0x1788
	[0084.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9a8
	[0084.459] GetFileSizeEx (in: hFile=0x9a8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.459] CreateFileMappingA (hFile=0x9a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9ac
	[0084.459] MapViewOfFile (hFileMappingObject=0x9ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.460] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.460] CloseHandle (hObject=0x9ac) returned 1
	[0084.460] GetCurrentThreadId () returned 0x1788
	[0084.460] FlushFileBuffers (hFile=0x9a8) returned 1
	[0084.462] CloseHandle (hObject=0x9a8) returned 1
	[0084.462] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 249
	[0084.462] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.466] free (_Block=0x3275880) 
	[0084.466] RtlExitUserThread (Status=0x0) 

Thread:
	id = 422
	os_tid = 0x178c

	[0084.468] _alloca_probe () returned 0x40328a
	[0084.468] GetCurrentThreadId () returned 0x178c
	[0084.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9ac
	[0084.469] GetFileSizeEx (in: hFile=0x9ac, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=65025) returned 1
	[0084.469] CreateFileMappingA (hFile=0x9ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfe01, lpName=0x0) returned 0x9b0
	[0084.469] MapViewOfFile (hFileMappingObject=0x9b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.480] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.481] CloseHandle (hObject=0x9b0) returned 1
	[0084.481] GetCurrentThreadId () returned 0x178c
	[0084.481] FlushFileBuffers (hFile=0x9ac) returned 1
	[0084.483] CloseHandle (hObject=0x9ac) returned 1
	[0084.483] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 249
	[0084.483] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.484] free (_Block=0x32798a0) 
	[0084.484] RtlExitUserThread (Status=0x0) 

Thread:
	id = 423
	os_tid = 0x1790

	[0084.486] _alloca_probe () returned 0x40328a
	[0084.486] GetCurrentThreadId () returned 0x1790
	[0084.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b0
	[0084.487] GetFileSizeEx (in: hFile=0x9b0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.487] CreateFileMappingA (hFile=0x9b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9b4
	[0084.487] MapViewOfFile (hFileMappingObject=0x9b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.488] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.488] CloseHandle (hObject=0x9b4) returned 1
	[0084.488] GetCurrentThreadId () returned 0x1790
	[0084.488] FlushFileBuffers (hFile=0x9b0) returned 1
	[0084.489] CloseHandle (hObject=0x9b0) returned 1
	[0084.490] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 249
	[0084.490] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.490] free (_Block=0x3277890) 
	[0084.490] RtlExitUserThread (Status=0x0) 

Thread:
	id = 424
	os_tid = 0x1794

	[0084.492] _alloca_probe () returned 0x40328a
	[0084.493] GetCurrentThreadId () returned 0x1794
	[0084.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b4
	[0084.493] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.493] CreateFileMappingA (hFile=0x9b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9b8
	[0084.493] MapViewOfFile (hFileMappingObject=0x9b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.494] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.494] CloseHandle (hObject=0x9b8) returned 1
	[0084.494] GetCurrentThreadId () returned 0x1794
	[0084.494] FlushFileBuffers (hFile=0x9b4) returned 1
	[0084.496] CloseHandle (hObject=0x9b4) returned 1
	[0084.496] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 249
	[0084.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.497] free (_Block=0x3275880) 
	[0084.497] RtlExitUserThread (Status=0x0) 

Thread:
	id = 425
	os_tid = 0x1798

	[0084.499] _alloca_probe () returned 0x40328a
	[0084.499] GetCurrentThreadId () returned 0x1798
	[0084.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b8
	[0084.500] GetFileSizeEx (in: hFile=0x9b8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9216) returned 1
	[0084.500] CreateFileMappingA (hFile=0x9b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0x9bc
	[0084.500] MapViewOfFile (hFileMappingObject=0x9bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.502] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.502] CloseHandle (hObject=0x9bc) returned 1
	[0084.502] GetCurrentThreadId () returned 0x1798
	[0084.502] FlushFileBuffers (hFile=0x9b8) returned 1
	[0084.504] CloseHandle (hObject=0x9b8) returned 1
	[0084.504] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 249
	[0084.504] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.505] free (_Block=0x327a8a8) 
	[0084.505] RtlExitUserThread (Status=0x0) 

Thread:
	id = 426
	os_tid = 0x179c

	[0084.507] _alloca_probe () returned 0x40328a
	[0084.507] GetCurrentThreadId () returned 0x179c
	[0084.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9bc
	[0084.508] GetFileSizeEx (in: hFile=0x9bc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.508] CreateFileMappingA (hFile=0x9bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9c0
	[0084.508] MapViewOfFile (hFileMappingObject=0x9c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.509] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.509] CloseHandle (hObject=0x9c0) returned 1
	[0084.509] GetCurrentThreadId () returned 0x179c
	[0084.509] FlushFileBuffers (hFile=0x9bc) returned 1
	[0084.510] CloseHandle (hObject=0x9bc) returned 1
	[0084.511] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 249
	[0084.511] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.512] free (_Block=0x3276888) 
	[0084.512] RtlExitUserThread (Status=0x0) 

Thread:
	id = 427
	os_tid = 0x17a0

	[0084.514] _alloca_probe () returned 0x40328a
	[0084.514] GetCurrentThreadId () returned 0x17a0
	[0084.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c0
	[0084.515] GetFileSizeEx (in: hFile=0x9c0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=399569) returned 1
	[0084.515] CreateFileMappingA (hFile=0x9c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618d1, lpName=0x0) returned 0x9c4
	[0084.515] MapViewOfFile (hFileMappingObject=0x9c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0084.583] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0084.586] CloseHandle (hObject=0x9c4) returned 1
	[0084.586] GetCurrentThreadId () returned 0x17a0
	[0084.586] FlushFileBuffers (hFile=0x9c0) returned 1
	[0084.591] CloseHandle (hObject=0x9c0) returned 1
	[0084.591] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 249
	[0084.591] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.592] free (_Block=0x3275880) 
	[0084.592] RtlExitUserThread (Status=0x0) 

Thread:
	id = 428
	os_tid = 0x17a4

	[0084.593] _alloca_probe () returned 0x40328a
	[0084.594] GetCurrentThreadId () returned 0x17a4
	[0084.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c4
	[0084.594] GetFileSizeEx (in: hFile=0x9c4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.594] CreateFileMappingA (hFile=0x9c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9c8
	[0084.594] MapViewOfFile (hFileMappingObject=0x9c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.595] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.595] CloseHandle (hObject=0x9c8) returned 1
	[0084.595] GetCurrentThreadId () returned 0x17a4
	[0084.595] FlushFileBuffers (hFile=0x9c4) returned 1
	[0084.597] CloseHandle (hObject=0x9c4) returned 1
	[0084.597] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 249
	[0084.597] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.598] free (_Block=0x3277890) 
	[0084.598] RtlExitUserThread (Status=0x0) 

Thread:
	id = 429
	os_tid = 0x17ac

	[0084.682] _alloca_probe () returned 0x40328a
	[0084.683] GetCurrentThreadId () returned 0x17ac
	[0084.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c8
	[0084.683] GetFileSizeEx (in: hFile=0x9c8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1473) returned 1
	[0084.683] CreateFileMappingA (hFile=0x9c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5c1, lpName=0x0) returned 0x9cc
	[0084.683] MapViewOfFile (hFileMappingObject=0x9cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.684] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.684] CloseHandle (hObject=0x9cc) returned 1
	[0084.684] GetCurrentThreadId () returned 0x17ac
	[0084.684] FlushFileBuffers (hFile=0x9c8) returned 1
	[0084.686] CloseHandle (hObject=0x9c8) returned 1
	[0084.687] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 249
	[0084.687] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.687] free (_Block=0x3274878) 
	[0084.688] RtlExitUserThread (Status=0x0) 

Thread:
	id = 430
	os_tid = 0x17b0

	[0084.689] _alloca_probe () returned 0x40328a
	[0084.690] GetCurrentThreadId () returned 0x17b0
	[0084.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9cc
	[0084.690] GetFileSizeEx (in: hFile=0x9cc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.690] CreateFileMappingA (hFile=0x9cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9d0
	[0084.690] MapViewOfFile (hFileMappingObject=0x9d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.691] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.691] CloseHandle (hObject=0x9d0) returned 1
	[0084.691] GetCurrentThreadId () returned 0x17b0
	[0084.691] FlushFileBuffers (hFile=0x9cc) returned 1
	[0084.693] CloseHandle (hObject=0x9cc) returned 1
	[0084.693] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 249
	[0084.693] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.694] free (_Block=0x3274878) 
	[0084.694] RtlExitUserThread (Status=0x0) 

Thread:
	id = 431
	os_tid = 0x17b4

	[0084.696] _alloca_probe () returned 0x40328a
	[0084.697] GetCurrentThreadId () returned 0x17b4
	[0084.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d0
	[0084.697] GetFileSizeEx (in: hFile=0x9d0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3777) returned 1
	[0084.697] CreateFileMappingA (hFile=0x9d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xec1, lpName=0x0) returned 0x9d4
	[0084.697] MapViewOfFile (hFileMappingObject=0x9d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.698] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.699] CloseHandle (hObject=0x9d4) returned 1
	[0084.699] GetCurrentThreadId () returned 0x17b4
	[0084.699] FlushFileBuffers (hFile=0x9d0) returned 1
	[0084.700] CloseHandle (hObject=0x9d0) returned 1
	[0084.701] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 249
	[0084.701] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.701] free (_Block=0x3276888) 
	[0084.701] RtlExitUserThread (Status=0x0) 

Thread:
	id = 432
	os_tid = 0x17b8

	[0084.703] _alloca_probe () returned 0x40328a
	[0084.704] GetCurrentThreadId () returned 0x17b8
	[0084.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d4
	[0084.704] GetFileSizeEx (in: hFile=0x9d4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.704] CreateFileMappingA (hFile=0x9d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9d8
	[0084.704] MapViewOfFile (hFileMappingObject=0x9d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.705] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.705] CloseHandle (hObject=0x9d8) returned 1
	[0084.705] GetCurrentThreadId () returned 0x17b8
	[0084.705] FlushFileBuffers (hFile=0x9d4) returned 1
	[0084.721] CloseHandle (hObject=0x9d4) returned 1
	[0084.721] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 249
	[0084.721] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.722] free (_Block=0x3275880) 
	[0084.722] RtlExitUserThread (Status=0x0) 

Thread:
	id = 433
	os_tid = 0x17bc

	[0084.720] _alloca_probe () returned 0x40328a
	[0084.720] GetCurrentThreadId () returned 0x17bc
	[0084.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9dc
	[0084.721] GetFileSizeEx (in: hFile=0x9dc, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1281) returned 1
	[0084.721] CreateFileMappingA (hFile=0x9dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9e0
	[0084.721] MapViewOfFile (hFileMappingObject=0x9e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.723] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.723] CloseHandle (hObject=0x9e0) returned 1
	[0084.723] GetCurrentThreadId () returned 0x17bc
	[0084.723] FlushFileBuffers (hFile=0x9dc) returned 1
	[0084.725] CloseHandle (hObject=0x9dc) returned 1
	[0084.725] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 249
	[0084.725] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.726] free (_Block=0x32798a0) 
	[0084.726] RtlExitUserThread (Status=0x0) 

Thread:
	id = 434
	os_tid = 0x17c0

	[0084.728] _alloca_probe () returned 0x40328a
	[0084.728] GetCurrentThreadId () returned 0x17c0
	[0084.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e0
	[0084.729] GetFileSizeEx (in: hFile=0x9e0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.729] CreateFileMappingA (hFile=0x9e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9d4
	[0084.729] MapViewOfFile (hFileMappingObject=0x9d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.729] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.730] CloseHandle (hObject=0x9d4) returned 1
	[0084.730] GetCurrentThreadId () returned 0x17c0
	[0084.730] FlushFileBuffers (hFile=0x9e0) returned 1
	[0084.731] CloseHandle (hObject=0x9e0) returned 1
	[0084.732] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 249
	[0084.732] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.732] free (_Block=0x32798a0) 
	[0084.732] RtlExitUserThread (Status=0x0) 

Thread:
	id = 435
	os_tid = 0x17c4

	[0084.734] _alloca_probe () returned 0x40328a
	[0084.735] GetCurrentThreadId () returned 0x17c4
	[0084.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d4
	[0084.735] GetFileSizeEx (in: hFile=0x9d4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=527985) returned 1
	[0084.735] CreateFileMappingA (hFile=0x9d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e71, lpName=0x0) returned 0x9e4
	[0084.735] MapViewOfFile (hFileMappingObject=0x9e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0084.868] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0084.872] CloseHandle (hObject=0x9e4) returned 1
	[0084.872] GetCurrentThreadId () returned 0x17c4
	[0084.872] FlushFileBuffers (hFile=0x9d4) returned 1
	[0084.875] CloseHandle (hObject=0x9d4) returned 1
	[0084.875] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 249
	[0084.875] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.876] free (_Block=0x3275880) 
	[0084.876] RtlExitUserThread (Status=0x0) 

Thread:
	id = 436
	os_tid = 0x17c8

	[0084.878] _alloca_probe () returned 0x40328a
	[0084.879] GetCurrentThreadId () returned 0x17c8
	[0084.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e4
	[0084.879] GetFileSizeEx (in: hFile=0x9e4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0084.879] CreateFileMappingA (hFile=0x9e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x9e8
	[0084.879] MapViewOfFile (hFileMappingObject=0x9e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.880] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.880] CloseHandle (hObject=0x9e8) returned 1
	[0084.880] GetCurrentThreadId () returned 0x17c8
	[0084.880] FlushFileBuffers (hFile=0x9e4) returned 1
	[0084.882] CloseHandle (hObject=0x9e4) returned 1
	[0084.882] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 249
	[0084.882] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0084.883] free (_Block=0x3274878) 
	[0084.883] RtlExitUserThread (Status=0x0) 

Thread:
	id = 437
	os_tid = 0x17cc

	[0084.885] _alloca_probe () returned 0x40328a
	[0084.886] GetCurrentThreadId () returned 0x17cc
	[0084.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0084.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e8
	[0084.886] GetFileSizeEx (in: hFile=0x9e8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3409) returned 1
	[0084.886] CreateFileMappingA (hFile=0x9e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd51, lpName=0x0) returned 0x9ec
	[0084.886] MapViewOfFile (hFileMappingObject=0x9ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0084.887] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0084.887] CloseHandle (hObject=0x9ec) returned 1
	[0084.887] GetCurrentThreadId () returned 0x17cc
	[0084.887] FlushFileBuffers (hFile=0x9e8) returned 1
	[0084.891] CloseHandle (hObject=0x9e8) returned 1
	[0084.891] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 249
	[0084.891] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0084.892] free (_Block=0x3277890) 
	[0084.892] RtlExitUserThread (Status=0x0) 

Thread:
	id = 438
	os_tid = 0x17d0

	[0084.893] _alloca_probe () returned 0x40328a
	[0084.893] GetCurrentThreadId () returned 0x17d0
	[0084.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", dwFileAttributes=0x80) returned 1
	[0084.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9ec
	[0084.894] GetFileSizeEx (in: hFile=0x9ec, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=2173073) returned 1
	[0084.894] CreateFileMappingA (hFile=0x9ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x212891, lpName=0x0) returned 0x9f0
	[0084.894] MapViewOfFile (hFileMappingObject=0x9f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x32b0000
	[0085.520] UnmapViewOfFile (lpBaseAddress=0x32b0000) returned 1
	[0085.537] CloseHandle (hObject=0x9f0) returned 1
	[0085.537] GetCurrentThreadId () returned 0x17d0
	[0085.537] FlushFileBuffers (hFile=0x9ec) returned 1
	[0085.586] CloseHandle (hObject=0x9ec) returned 1
	[0085.586] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 219
	[0085.586] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml")) returned 1
	[0085.588] free (_Block=0x327a8a8) 
	[0085.588] RtlExitUserThread (Status=0x0) 

Thread:
	id = 439
	os_tid = 0x17d4

	[0085.591] _alloca_probe () returned 0x40328a
	[0085.592] GetCurrentThreadId () returned 0x17d4
	[0085.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0085.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f0
	[0085.592] GetFileSizeEx (in: hFile=0x9f0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9857) returned 1
	[0085.592] CreateFileMappingA (hFile=0x9f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2681, lpName=0x0) returned 0x9f4
	[0085.592] MapViewOfFile (hFileMappingObject=0x9f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0085.595] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0085.595] CloseHandle (hObject=0x9f4) returned 1
	[0085.595] GetCurrentThreadId () returned 0x17d4
	[0085.595] FlushFileBuffers (hFile=0x9f0) returned 1
	[0085.597] CloseHandle (hObject=0x9f0) returned 1
	[0085.597] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 221
	[0085.597] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0085.598] free (_Block=0x327b8b0) 
	[0085.598] RtlExitUserThread (Status=0x0) 

Thread:
	id = 440
	os_tid = 0x17d8

	[0085.599] _alloca_probe () returned 0x40328a
	[0085.600] GetCurrentThreadId () returned 0x17d8
	[0085.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0085.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f4
	[0085.600] GetFileSizeEx (in: hFile=0x9f4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=385) returned 1
	[0085.600] CreateFileMappingA (hFile=0x9f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181, lpName=0x0) returned 0x9f8
	[0085.600] MapViewOfFile (hFileMappingObject=0x9f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0085.601] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0085.601] CloseHandle (hObject=0x9f8) returned 1
	[0085.601] GetCurrentThreadId () returned 0x17d8
	[0085.601] FlushFileBuffers (hFile=0x9f4) returned 1
	[0085.603] CloseHandle (hObject=0x9f4) returned 1
	[0085.603] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 218
	[0085.603] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0085.604] free (_Block=0x3276888) 
	[0085.604] RtlExitUserThread (Status=0x0) 

Thread:
	id = 441
	os_tid = 0x17dc

	[0085.606] _alloca_probe () returned 0x40328a
	[0085.606] GetCurrentThreadId () returned 0x17dc
	[0085.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0085.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f8
	[0085.607] GetFileSizeEx (in: hFile=0x9f8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=387393) returned 1
	[0085.607] CreateFileMappingA (hFile=0x9f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e941, lpName=0x0) returned 0x9fc
	[0085.607] MapViewOfFile (hFileMappingObject=0x9fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0085.671] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0085.674] CloseHandle (hObject=0x9fc) returned 1
	[0085.674] GetCurrentThreadId () returned 0x17dc
	[0085.674] FlushFileBuffers (hFile=0x9f8) returned 1
	[0085.676] CloseHandle (hObject=0x9f8) returned 1
	[0085.677] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 278
	[0085.677] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0
	[0085.677] free (_Block=0x3278898) 
	[0085.677] RtlExitUserThread (Status=0x0) 

Thread:
	id = 442
	os_tid = 0x17e0

	[0085.678] _alloca_probe () returned 0x40328a
	[0085.678] GetCurrentThreadId () returned 0x17e0
	[0085.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0085.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9fc
	[0085.681] GetFileSizeEx (in: hFile=0x9fc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1553) returned 1
	[0085.681] CreateFileMappingA (hFile=0x9fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x611, lpName=0x0) returned 0xa00
	[0085.681] MapViewOfFile (hFileMappingObject=0xa00, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0085.682] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0085.682] CloseHandle (hObject=0xa00) returned 1
	[0085.682] GetCurrentThreadId () returned 0x17e0
	[0085.682] FlushFileBuffers (hFile=0x9fc) returned 1
	[0085.689] CloseHandle (hObject=0x9fc) returned 1
	[0085.689] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 278
	[0085.689] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0
	[0085.689] free (_Block=0x32798a0) 
	[0085.689] RtlExitUserThread (Status=0x0) 

Thread:
	id = 443
	os_tid = 0x17e4

	[0085.691] _alloca_probe () returned 0x40328a
	[0085.691] GetCurrentThreadId () returned 0x17e4
	[0085.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0085.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa00
	[0085.691] GetFileSizeEx (in: hFile=0xa00, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=800881) returned 1
	[0085.692] CreateFileMappingA (hFile=0xa00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3871, lpName=0x0) returned 0xa04
	[0085.692] MapViewOfFile (hFileMappingObject=0xa04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0085.821] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0085.828] CloseHandle (hObject=0xa04) returned 1
	[0085.828] GetCurrentThreadId () returned 0x17e4
	[0085.828] FlushFileBuffers (hFile=0xa00) returned 1
	[0085.830] CloseHandle (hObject=0xa00) returned 1
	[0085.830] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 278
	[0085.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0
	[0085.830] free (_Block=0x327a8a8) 
	[0085.830] RtlExitUserThread (Status=0x0) 

Thread:
	id = 444
	os_tid = 0x17e8

	[0085.832] _alloca_probe () returned 0x40328a
	[0085.832] GetCurrentThreadId () returned 0x17e8
	[0085.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0085.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa04
	[0085.833] GetFileSizeEx (in: hFile=0xa04, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0085.833] CreateFileMappingA (hFile=0xa04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa08
	[0085.833] MapViewOfFile (hFileMappingObject=0xa08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0085.834] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0085.834] CloseHandle (hObject=0xa08) returned 1
	[0085.834] GetCurrentThreadId () returned 0x17e8
	[0085.834] FlushFileBuffers (hFile=0xa04) returned 1
	[0085.835] CloseHandle (hObject=0xa04) returned 1
	[0085.836] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 278
	[0085.836] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0
	[0085.836] free (_Block=0x32798a0) 
	[0085.836] RtlExitUserThread (Status=0x0) 

Thread:
	id = 445
	os_tid = 0x17ec

	[0085.838] _alloca_probe () returned 0x40328a
	[0085.838] GetCurrentThreadId () returned 0x17ec
	[0085.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0085.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa08
	[0085.839] GetFileSizeEx (in: hFile=0xa08, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=496513) returned 1
	[0085.839] CreateFileMappingA (hFile=0xa08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0xa0c
	[0085.839] MapViewOfFile (hFileMappingObject=0xa0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0085.918] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0085.922] CloseHandle (hObject=0xa0c) returned 1
	[0085.922] GetCurrentThreadId () returned 0x17ec
	[0085.922] FlushFileBuffers (hFile=0xa08) returned 1
	[0085.924] CloseHandle (hObject=0xa08) returned 1
	[0085.925] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 278
	[0085.925] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0
	[0085.925] free (_Block=0x3276888) 
	[0085.925] RtlExitUserThread (Status=0x0) 

Thread:
	id = 446
	os_tid = 0x17f0

	[0086.119] _alloca_probe () returned 0x40328a
	[0086.119] GetCurrentThreadId () returned 0x17f0
	[0086.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0c
	[0086.120] GetFileSizeEx (in: hFile=0xa0c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0086.120] CreateFileMappingA (hFile=0xa0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa10
	[0086.120] MapViewOfFile (hFileMappingObject=0xa10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.121] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.121] CloseHandle (hObject=0xa10) returned 1
	[0086.121] GetCurrentThreadId () returned 0x17f0
	[0086.121] FlushFileBuffers (hFile=0xa0c) returned 1
	[0086.123] CloseHandle (hObject=0xa0c) returned 1
	[0086.123] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 278
	[0086.123] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0
	[0086.124] free (_Block=0x3278898) 
	[0086.124] RtlExitUserThread (Status=0x0) 

Thread:
	id = 447
	os_tid = 0x17f4

	[0086.125] _alloca_probe () returned 0x40328a
	[0086.125] GetCurrentThreadId () returned 0x17f4
	[0086.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa10
	[0086.126] GetFileSizeEx (in: hFile=0xa10, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=253712) returned 1
	[0086.126] CreateFileMappingA (hFile=0xa10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0xa14
	[0086.126] MapViewOfFile (hFileMappingObject=0xa14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0086.170] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0086.173] CloseHandle (hObject=0xa14) returned 1
	[0086.173] GetCurrentThreadId () returned 0x17f4
	[0086.173] FlushFileBuffers (hFile=0xa10) returned 1
	[0086.174] CloseHandle (hObject=0xa10) returned 1
	[0086.175] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 278
	[0086.175] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0
	[0086.175] free (_Block=0x3274878) 
	[0086.175] RtlExitUserThread (Status=0x0) 

Thread:
	id = 448
	os_tid = 0x17f8

	[0086.177] _alloca_probe () returned 0x40328a
	[0086.177] GetCurrentThreadId () returned 0x17f8
	[0086.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa14
	[0086.177] GetFileSizeEx (in: hFile=0xa14, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0086.178] CreateFileMappingA (hFile=0xa14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa18
	[0086.178] MapViewOfFile (hFileMappingObject=0xa18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.178] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.178] CloseHandle (hObject=0xa18) returned 1
	[0086.178] GetCurrentThreadId () returned 0x17f8
	[0086.179] FlushFileBuffers (hFile=0xa14) returned 1
	[0086.180] CloseHandle (hObject=0xa14) returned 1
	[0086.180] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 278
	[0086.180] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0
	[0086.181] free (_Block=0x3277890) 
	[0086.181] RtlExitUserThread (Status=0x0) 

Thread:
	id = 449
	os_tid = 0x17fc

	[0086.182] _alloca_probe () returned 0x40328a
	[0086.182] GetCurrentThreadId () returned 0x17fc
	[0086.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa18
	[0086.183] GetFileSizeEx (in: hFile=0xa18, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1124977) returned 1
	[0086.183] CreateFileMappingA (hFile=0xa18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a71, lpName=0x0) returned 0xa1c
	[0086.183] MapViewOfFile (hFileMappingObject=0xa1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0086.370] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0086.380] CloseHandle (hObject=0xa1c) returned 1
	[0086.380] GetCurrentThreadId () returned 0x17fc
	[0086.380] FlushFileBuffers (hFile=0xa18) returned 1
	[0086.382] CloseHandle (hObject=0xa18) returned 1
	[0086.383] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 278
	[0086.383] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0
	[0086.383] free (_Block=0x3275880) 
	[0086.383] RtlExitUserThread (Status=0x0) 

Thread:
	id = 450
	os_tid = 0x7f0

	[0086.386] _alloca_probe () returned 0x40328a
	[0086.386] GetCurrentThreadId () returned 0x7f0
	[0086.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa1c
	[0086.387] GetFileSizeEx (in: hFile=0xa1c, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=19473) returned 1
	[0086.387] CreateFileMappingA (hFile=0xa1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c11, lpName=0x0) returned 0xa20
	[0086.387] MapViewOfFile (hFileMappingObject=0xa20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0086.390] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0086.391] CloseHandle (hObject=0xa20) returned 1
	[0086.391] GetCurrentThreadId () returned 0x7f0
	[0086.391] FlushFileBuffers (hFile=0xa1c) returned 1
	[0086.393] CloseHandle (hObject=0xa1c) returned 1
	[0086.393] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 278
	[0086.393] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0
	[0086.393] free (_Block=0x3278898) 
	[0086.393] RtlExitUserThread (Status=0x0) 

Thread:
	id = 451
	os_tid = 0xd9c

	[0086.395] _alloca_probe () returned 0x40328a
	[0086.395] GetCurrentThreadId () returned 0xd9c
	[0086.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa20
	[0086.395] GetFileSizeEx (in: hFile=0xa20, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=763377) returned 1
	[0086.395] CreateFileMappingA (hFile=0xa20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5f1, lpName=0x0) returned 0xa24
	[0086.396] MapViewOfFile (hFileMappingObject=0xa24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f30000
	[0086.564] UnmapViewOfFile (lpBaseAddress=0x2f30000) returned 1
	[0086.571] CloseHandle (hObject=0xa24) returned 1
	[0086.571] GetCurrentThreadId () returned 0xd9c
	[0086.571] FlushFileBuffers (hFile=0xa20) returned 1
	[0086.696] CloseHandle (hObject=0xa20) returned 1
	[0086.696] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 278
	[0086.696] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0
	[0086.696] free (_Block=0x3275880) 
	[0086.696] RtlExitUserThread (Status=0x0) 

Thread:
	id = 452
	os_tid = 0xf84

	[0086.703] _alloca_probe () returned 0x40328a
	[0086.703] GetCurrentThreadId () returned 0xf84
	[0086.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0c
	[0086.797] GetFileSizeEx (in: hFile=0xb0c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1281) returned 1
	[0086.797] CreateFileMappingA (hFile=0xb0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xb04
	[0086.797] MapViewOfFile (hFileMappingObject=0xb04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.798] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.798] CloseHandle (hObject=0xb04) returned 1
	[0086.798] GetCurrentThreadId () returned 0xf84
	[0086.798] FlushFileBuffers (hFile=0xb0c) returned 1
	[0087.446] CloseHandle (hObject=0xb0c) returned 1
	[0087.801] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 278
	[0087.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.801] free (_Block=0x3274878) 
	[0087.801] RtlExitUserThread (Status=0x0) 

Thread:
	id = 453
	os_tid = 0xfb0

	[0086.705] _alloca_probe () returned 0x40328a
	[0086.705] GetCurrentThreadId () returned 0xfb0
	[0086.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xafc
	[0086.797] GetFileSizeEx (in: hFile=0xafc, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=1281) returned 1
	[0086.797] CreateFileMappingA (hFile=0xafc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xaf4
	[0086.798] MapViewOfFile (hFileMappingObject=0xaf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0086.799] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0086.800] CloseHandle (hObject=0xaf4) returned 1
	[0086.800] GetCurrentThreadId () returned 0xfb0
	[0086.800] FlushFileBuffers (hFile=0xafc) returned 1
	[0087.493] CloseHandle (hObject=0xafc) returned 1
	[0087.803] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 278
	[0087.803] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.803] free (_Block=0x327c8b8) 
	[0087.803] RtlExitUserThread (Status=0x0) 

Thread:
	id = 454
	os_tid = 0x12f4

	[0086.706] _alloca_probe () returned 0x40328a
	[0086.707] GetCurrentThreadId () returned 0x12f4
	[0086.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb04
	[0086.799] GetFileSizeEx (in: hFile=0xb04, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=2161) returned 1
	[0086.799] CreateFileMappingA (hFile=0xb04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0xaec
	[0086.799] MapViewOfFile (hFileMappingObject=0xaec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.802] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.802] CloseHandle (hObject=0xaec) returned 1
	[0086.802] GetCurrentThreadId () returned 0x12f4
	[0086.802] FlushFileBuffers (hFile=0xb04) returned 1
	[0087.618] CloseHandle (hObject=0xb04) returned 1
	[0087.806] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 278
	[0087.807] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0
	[0087.807] free (_Block=0x327b8b0) 
	[0087.807] RtlExitUserThread (Status=0x0) 

Thread:
	id = 455
	os_tid = 0xab4

	[0086.708] _alloca_probe () returned 0x40328a
	[0086.709] GetCurrentThreadId () returned 0xab4
	[0086.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaf4
	[0086.800] GetFileSizeEx (in: hFile=0xaf4, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=2161) returned 1
	[0086.800] CreateFileMappingA (hFile=0xaf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0xae4
	[0086.800] MapViewOfFile (hFileMappingObject=0xae4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0086.803] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0086.803] CloseHandle (hObject=0xae4) returned 1
	[0086.803] GetCurrentThreadId () returned 0xab4
	[0086.803] FlushFileBuffers (hFile=0xaf4) returned 1
	[0087.571] CloseHandle (hObject=0xaf4) returned 1
	[0087.805] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 278
	[0087.805] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0
	[0087.805] free (_Block=0x3275880) 
	[0087.805] RtlExitUserThread (Status=0x0) 

Thread:
	id = 456
	os_tid = 0xe70

	[0086.710] _alloca_probe () returned 0x40328a
	[0086.710] GetCurrentThreadId () returned 0xe70
	[0086.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaec
	[0086.802] GetFileSizeEx (in: hFile=0xaec, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=215905) returned 1
	[0086.802] CreateFileMappingA (hFile=0xaec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b61, lpName=0x0) returned 0xadc
	[0086.802] MapViewOfFile (hFileMappingObject=0xadc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x55c0000
	[0086.859] UnmapViewOfFile (lpBaseAddress=0x55c0000) returned 1
	[0086.861] CloseHandle (hObject=0xadc) returned 1
	[0086.861] GetCurrentThreadId () returned 0xe70
	[0086.861] FlushFileBuffers (hFile=0xaec) returned 1
	[0087.703] CloseHandle (hObject=0xaec) returned 1
	[0087.810] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 278
	[0087.810] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.811] free (_Block=0x3278898) 
	[0087.811] RtlExitUserThread (Status=0x0) 

Thread:
	id = 457
	os_tid = 0xfa0

	[0086.712] _alloca_probe () returned 0x40328a
	[0086.712] GetCurrentThreadId () returned 0xfa0
	[0086.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xae4
	[0086.804] GetFileSizeEx (in: hFile=0xae4, lpFileSize=0x37aff5c | out: lpFileSize=0x37aff5c*=1281) returned 1
	[0086.804] CreateFileMappingA (hFile=0xae4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xad4
	[0086.804] MapViewOfFile (hFileMappingObject=0xad4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.811] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.811] CloseHandle (hObject=0xad4) returned 1
	[0086.811] GetCurrentThreadId () returned 0xfa0
	[0086.811] FlushFileBuffers (hFile=0xae4) returned 1
	[0087.618] CloseHandle (hObject=0xae4) returned 1
	[0087.808] _swprintf (in: param_1=0x37a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 278
	[0087.808] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.808] free (_Block=0x32798a0) 
	[0087.808] RtlExitUserThread (Status=0x0) 

Thread:
	id = 458
	os_tid = 0xf90

	[0086.713] _alloca_probe () returned 0x40328a
	[0086.713] GetCurrentThreadId () returned 0xf90
	[0086.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xacc
	[0086.810] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0x38eff5c | out: lpFileSize=0x38eff5c*=1281) returned 1
	[0086.810] CreateFileMappingA (hFile=0xacc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xac4
	[0086.810] MapViewOfFile (hFileMappingObject=0xac4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0086.818] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0086.818] CloseHandle (hObject=0xac4) returned 1
	[0086.818] GetCurrentThreadId () returned 0xf90
	[0086.818] FlushFileBuffers (hFile=0xacc) returned 1
	[0087.664] CloseHandle (hObject=0xacc) returned 1
	[0087.809] _swprintf (in: param_1=0x38e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 278
	[0087.809] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.809] free (_Block=0x327a8a8) 
	[0087.809] RtlExitUserThread (Status=0x0) 

Thread:
	id = 459
	os_tid = 0xfb4

	[0086.715] _alloca_probe () returned 0x40328a
	[0086.715] GetCurrentThreadId () returned 0xfb4
	[0086.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4
	[0086.811] GetFileSizeEx (in: hFile=0xad4, lpFileSize=0x3afff5c | out: lpFileSize=0x3afff5c*=343329) returned 1
	[0086.811] CreateFileMappingA (hFile=0xad4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0xabc
	[0086.811] MapViewOfFile (hFileMappingObject=0xabc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5600000
	[0087.130] UnmapViewOfFile (lpBaseAddress=0x5600000) returned 1
	[0087.133] CloseHandle (hObject=0xabc) returned 1
	[0087.133] GetCurrentThreadId () returned 0xfb4
	[0087.133] FlushFileBuffers (hFile=0xad4) returned 1
	[0087.783] CloseHandle (hObject=0xad4) returned 1
	[0087.818] _swprintf (in: param_1=0x3af9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 278
	[0087.818] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.819] free (_Block=0x327d8c0) 
	[0087.819] RtlExitUserThread (Status=0x0) 

Thread:
	id = 460
	os_tid = 0xfc8

	[0086.716] _alloca_probe () returned 0x40328a
	[0086.717] GetCurrentThreadId () returned 0xfc8
	[0086.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac4
	[0086.818] GetFileSizeEx (in: hFile=0xac4, lpFileSize=0x3bfff5c | out: lpFileSize=0x3bfff5c*=14913) returned 1
	[0086.819] CreateFileMappingA (hFile=0xac4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0xab4
	[0086.819] MapViewOfFile (hFileMappingObject=0xab4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.839] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.839] CloseHandle (hObject=0xab4) returned 1
	[0086.839] GetCurrentThreadId () returned 0xfc8
	[0086.839] FlushFileBuffers (hFile=0xac4) returned 1
	[0087.703] CloseHandle (hObject=0xac4) returned 1
	[0087.809] _swprintf (in: param_1=0x3bf9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 278
	[0087.810] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.810] free (_Block=0x3276888) 
	[0087.810] RtlExitUserThread (Status=0x0) 

Thread:
	id = 461
	os_tid = 0x550

	[0086.718] _alloca_probe () returned 0x40328a
	[0086.719] GetCurrentThreadId () returned 0x550
	[0086.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaac
	[0086.836] GetFileSizeEx (in: hFile=0xaac, lpFileSize=0x3cfff5c | out: lpFileSize=0x3cfff5c*=357361) returned 1
	[0086.836] CreateFileMappingA (hFile=0xaac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573f1, lpName=0x0) returned 0xaa4
	[0086.836] MapViewOfFile (hFileMappingObject=0xaa4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5660000
	[0087.178] UnmapViewOfFile (lpBaseAddress=0x5660000) returned 1
	[0087.181] CloseHandle (hObject=0xaa4) returned 1
	[0087.181] GetCurrentThreadId () returned 0x550
	[0087.181] FlushFileBuffers (hFile=0xaac) returned 1
	[0087.783] CloseHandle (hObject=0xaac) returned 1
	[0087.820] _swprintf (in: param_1=0x3cf9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 278
	[0087.820] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.821] free (_Block=0x327e8c8) 
	[0087.821] RtlExitUserThread (Status=0x0) 

Thread:
	id = 462
	os_tid = 0xd14

	[0086.720] _alloca_probe () returned 0x40328a
	[0086.721] GetCurrentThreadId () returned 0xd14
	[0086.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab4
	[0086.845] GetFileSizeEx (in: hFile=0xab4, lpFileSize=0x3dfff5c | out: lpFileSize=0x3dfff5c*=1281) returned 1
	[0086.845] CreateFileMappingA (hFile=0xab4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa9c
	[0086.845] MapViewOfFile (hFileMappingObject=0xa9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.879] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.879] CloseHandle (hObject=0xa9c) returned 1
	[0086.879] GetCurrentThreadId () returned 0xd14
	[0086.879] FlushFileBuffers (hFile=0xab4) returned 1
	[0087.775] CloseHandle (hObject=0xab4) returned 1
	[0087.814] _swprintf (in: param_1=0x3df9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 278
	[0087.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.814] free (_Block=0x3277890) 
	[0087.814] RtlExitUserThread (Status=0x0) 

Thread:
	id = 463
	os_tid = 0xb70

	[0086.722] _alloca_probe () returned 0x40328a
	[0086.722] GetCurrentThreadId () returned 0xb70
	[0086.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xadc
	[0086.867] GetFileSizeEx (in: hFile=0xadc, lpFileSize=0x3f3ff5c | out: lpFileSize=0x3f3ff5c*=65025) returned 1
	[0086.867] CreateFileMappingA (hFile=0xadc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfe01, lpName=0x0) returned 0xa94
	[0086.867] MapViewOfFile (hFileMappingObject=0xa94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0087.086] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0087.087] CloseHandle (hObject=0xa94) returned 1
	[0087.087] GetCurrentThreadId () returned 0xb70
	[0087.087] FlushFileBuffers (hFile=0xadc) returned 1
	[0087.781] CloseHandle (hObject=0xadc) returned 1
	[0087.816] _swprintf (in: param_1=0x3f39f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 278
	[0087.816] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.817] free (_Block=0x327f8d0) 
	[0087.817] RtlExitUserThread (Status=0x0) 

Thread:
	id = 464
	os_tid = 0xa88

	[0086.723] _alloca_probe () returned 0x40328a
	[0086.724] GetCurrentThreadId () returned 0xa88
	[0086.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa9c
	[0086.885] GetFileSizeEx (in: hFile=0xa9c, lpFileSize=0x407ff5c | out: lpFileSize=0x407ff5c*=1281) returned 1
	[0086.885] CreateFileMappingA (hFile=0xa9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa8c
	[0086.885] MapViewOfFile (hFileMappingObject=0xa8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0086.925] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0086.925] CloseHandle (hObject=0xa8c) returned 1
	[0086.925] GetCurrentThreadId () returned 0xa88
	[0086.925] FlushFileBuffers (hFile=0xa9c) returned 1
	[0087.777] CloseHandle (hObject=0xa9c) returned 1
	[0087.815] _swprintf (in: param_1=0x4079f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 278
	[0087.815] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.815] free (_Block=0x32808d8) 
	[0087.815] RtlExitUserThread (Status=0x0) 

Thread:
	id = 465
	os_tid = 0x728

	[0086.725] _alloca_probe () returned 0x40328a
	[0086.725] GetCurrentThreadId () returned 0x728
	[0086.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa84
	[0086.913] GetFileSizeEx (in: hFile=0xa84, lpFileSize=0x41bff5c | out: lpFileSize=0x41bff5c*=1281) returned 1
	[0086.913] CreateFileMappingA (hFile=0xa84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa7c
	[0086.913] MapViewOfFile (hFileMappingObject=0xa7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x55c0000
	[0087.134] UnmapViewOfFile (lpBaseAddress=0x55c0000) returned 1
	[0087.135] CloseHandle (hObject=0xa7c) returned 1
	[0087.135] GetCurrentThreadId () returned 0x728
	[0087.135] FlushFileBuffers (hFile=0xa84) returned 1
	[0087.783] CloseHandle (hObject=0xa84) returned 1
	[0087.817] _swprintf (in: param_1=0x41b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 278
	[0087.817] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.818] free (_Block=0x32818e0) 
	[0087.818] RtlExitUserThread (Status=0x0) 

Thread:
	id = 466
	os_tid = 0x1348

	[0086.727] _alloca_probe () returned 0x40328a
	[0086.727] GetCurrentThreadId () returned 0x1348
	[0086.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xabc
	[0087.133] GetFileSizeEx (in: hFile=0xabc, lpFileSize=0x42fff5c | out: lpFileSize=0x42fff5c*=9216) returned 1
	[0087.134] CreateFileMappingA (hFile=0xabc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0xa94
	[0087.134] MapViewOfFile (hFileMappingObject=0xa94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.162] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.162] CloseHandle (hObject=0xa94) returned 1
	[0087.162] GetCurrentThreadId () returned 0x1348
	[0087.162] FlushFileBuffers (hFile=0xabc) returned 1
	[0087.783] CloseHandle (hObject=0xabc) returned 1
	[0087.819] _swprintf (in: param_1=0x42f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 278
	[0087.819] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.819] free (_Block=0x32828e8) 
	[0087.820] RtlExitUserThread (Status=0x0) 

Thread:
	id = 467
	os_tid = 0x1350

	[0086.730] _alloca_probe () returned 0x40328a
	[0086.731] GetCurrentThreadId () returned 0x1350
	[0086.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa7c
	[0087.160] GetFileSizeEx (in: hFile=0xa7c, lpFileSize=0x443ff5c | out: lpFileSize=0x443ff5c*=1281) returned 1
	[0087.160] CreateFileMappingA (hFile=0xa7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa8c
	[0087.160] MapViewOfFile (hFileMappingObject=0xa8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0087.182] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0087.182] CloseHandle (hObject=0xa8c) returned 1
	[0087.182] GetCurrentThreadId () returned 0x1350
	[0087.182] FlushFileBuffers (hFile=0xa7c) returned 1
	[0087.783] CloseHandle (hObject=0xa7c) returned 1
	[0087.821] _swprintf (in: param_1=0x4439f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 278
	[0087.821] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.821] free (_Block=0x328b8b8) 
	[0087.821] RtlExitUserThread (Status=0x0) 

Thread:
	id = 468
	os_tid = 0xd7c

	[0086.732] _alloca_probe () returned 0x40328a
	[0086.732] GetCurrentThreadId () returned 0xd7c
	[0086.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa4
	[0087.181] GetFileSizeEx (in: hFile=0xaa4, lpFileSize=0x457ff5c | out: lpFileSize=0x457ff5c*=399569) returned 1
	[0087.181] CreateFileMappingA (hFile=0xaa4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618d1, lpName=0x0) returned 0xa94
	[0087.181] MapViewOfFile (hFileMappingObject=0xa94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x55c0000
	[0087.255] UnmapViewOfFile (lpBaseAddress=0x55c0000) returned 1
	[0087.259] CloseHandle (hObject=0xa94) returned 1
	[0087.259] GetCurrentThreadId () returned 0xd7c
	[0087.259] FlushFileBuffers (hFile=0xaa4) returned 1
	[0087.796] CloseHandle (hObject=0xaa4) returned 1
	[0087.826] _swprintf (in: param_1=0x4579f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 278
	[0087.826] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.826] free (_Block=0x32888a0) 
	[0087.826] RtlExitUserThread (Status=0x0) 

Thread:
	id = 469
	os_tid = 0x6d8

	[0086.733] _alloca_probe () returned 0x40328a
	[0086.734] GetCurrentThreadId () returned 0x6d8
	[0086.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8c
	[0087.183] GetFileSizeEx (in: hFile=0xa8c, lpFileSize=0x46bff5c | out: lpFileSize=0x46bff5c*=1281) returned 1
	[0087.183] CreateFileMappingA (hFile=0xa8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa74
	[0087.183] MapViewOfFile (hFileMappingObject=0xa74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.190] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.191] CloseHandle (hObject=0xa74) returned 1
	[0087.191] GetCurrentThreadId () returned 0x6d8
	[0087.191] FlushFileBuffers (hFile=0xa8c) returned 1
	[0087.784] CloseHandle (hObject=0xa8c) returned 1
	[0087.822] _swprintf (in: param_1=0x46b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 278
	[0087.822] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.822] free (_Block=0x3284880) 
	[0087.822] RtlExitUserThread (Status=0x0) 

Thread:
	id = 470
	os_tid = 0xfb8

	[0086.735] _alloca_probe () returned 0x40328a
	[0086.735] GetCurrentThreadId () returned 0xfb8
	[0086.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa6c
	[0087.190] GetFileSizeEx (in: hFile=0xa6c, lpFileSize=0x47fff5c | out: lpFileSize=0x47fff5c*=1473) returned 1
	[0087.190] CreateFileMappingA (hFile=0xa6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5c1, lpName=0x0) returned 0xa64
	[0087.190] MapViewOfFile (hFileMappingObject=0xa64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0087.197] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0087.198] CloseHandle (hObject=0xa64) returned 1
	[0087.198] GetCurrentThreadId () returned 0xfb8
	[0087.198] FlushFileBuffers (hFile=0xa6c) returned 1
	[0087.796] CloseHandle (hObject=0xa6c) returned 1
	[0087.825] _swprintf (in: param_1=0x47f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 278
	[0087.825] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.825] free (_Block=0x32898a8) 
	[0087.825] RtlExitUserThread (Status=0x0) 

Thread:
	id = 471
	os_tid = 0x12e4

	[0086.737] _alloca_probe () returned 0x40328a
	[0086.737] GetCurrentThreadId () returned 0x12e4
	[0086.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa74
	[0087.197] GetFileSizeEx (in: hFile=0xa74, lpFileSize=0x493ff5c | out: lpFileSize=0x493ff5c*=1281) returned 1
	[0087.197] CreateFileMappingA (hFile=0xa74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa5c
	[0087.197] MapViewOfFile (hFileMappingObject=0xa5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.209] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.209] CloseHandle (hObject=0xa5c) returned 1
	[0087.209] GetCurrentThreadId () returned 0x12e4
	[0087.209] FlushFileBuffers (hFile=0xa74) returned 1
	[0087.784] CloseHandle (hObject=0xa74) returned 1
	[0087.823] _swprintf (in: param_1=0x4939f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 278
	[0087.823] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.823] free (_Block=0x328a8b0) 
	[0087.823] RtlExitUserThread (Status=0x0) 

Thread:
	id = 472
	os_tid = 0x137c

	[0086.738] _alloca_probe () returned 0x40328a
	[0086.739] GetCurrentThreadId () returned 0x137c
	[0086.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa64
	[0087.208] GetFileSizeEx (in: hFile=0xa64, lpFileSize=0x4a7ff5c | out: lpFileSize=0x4a7ff5c*=3777) returned 1
	[0087.209] CreateFileMappingA (hFile=0xa64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xec1, lpName=0x0) returned 0xa54
	[0087.209] MapViewOfFile (hFileMappingObject=0xa54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0087.232] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0087.232] CloseHandle (hObject=0xa54) returned 1
	[0087.232] GetCurrentThreadId () returned 0x137c
	[0087.232] FlushFileBuffers (hFile=0xa64) returned 1
	[0087.794] CloseHandle (hObject=0xa64) returned 1
	[0087.824] _swprintf (in: param_1=0x4a79f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 278
	[0087.824] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.824] free (_Block=0x3285888) 
	[0087.824] RtlExitUserThread (Status=0x0) 

Thread:
	id = 473
	os_tid = 0x13ac

	[0086.740] _alloca_probe () returned 0x40328a
	[0086.740] GetCurrentThreadId () returned 0x13ac
	[0086.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa5c
	[0087.210] GetFileSizeEx (in: hFile=0xa5c, lpFileSize=0x4bbff5c | out: lpFileSize=0x4bbff5c*=1281) returned 1
	[0087.210] CreateFileMappingA (hFile=0xa5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa4c
	[0087.210] MapViewOfFile (hFileMappingObject=0xa4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.234] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.234] CloseHandle (hObject=0xa4c) returned 1
	[0087.234] GetCurrentThreadId () returned 0x13ac
	[0087.234] FlushFileBuffers (hFile=0xa5c) returned 1
	[0087.798] CloseHandle (hObject=0xa5c) returned 1
	[0087.827] _swprintf (in: param_1=0x4bb9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 278
	[0087.827] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.827] free (_Block=0x328c8c0) 
	[0087.827] RtlExitUserThread (Status=0x0) 

Thread:
	id = 474
	os_tid = 0x520

	[0086.743] _alloca_probe () returned 0x40328a
	[0086.743] GetCurrentThreadId () returned 0x520
	[0086.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa54
	[0087.233] GetFileSizeEx (in: hFile=0xa54, lpFileSize=0x4cfff5c | out: lpFileSize=0x4cfff5c*=1281) returned 1
	[0087.233] CreateFileMappingA (hFile=0xa54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa44
	[0087.233] MapViewOfFile (hFileMappingObject=0xa44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0087.260] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0087.260] CloseHandle (hObject=0xa44) returned 1
	[0087.260] GetCurrentThreadId () returned 0x520
	[0087.260] FlushFileBuffers (hFile=0xa54) returned 1
	[0087.799] CloseHandle (hObject=0xa54) returned 1
	[0087.828] _swprintf (in: param_1=0x4cf9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 278
	[0087.828] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.828] free (_Block=0x328d8c8) 
	[0087.828] RtlExitUserThread (Status=0x0) 

Thread:
	id = 475
	os_tid = 0x1370

	[0086.745] _alloca_probe () returned 0x40328a
	[0086.745] GetCurrentThreadId () returned 0x1370
	[0086.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa94
	[0087.259] GetFileSizeEx (in: hFile=0xa94, lpFileSize=0x4e3ff5c | out: lpFileSize=0x4e3ff5c*=1281) returned 1
	[0087.259] CreateFileMappingA (hFile=0xa94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa4c
	[0087.259] MapViewOfFile (hFileMappingObject=0xa4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.261] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.261] CloseHandle (hObject=0xa4c) returned 1
	[0087.261] GetCurrentThreadId () returned 0x1370
	[0087.261] FlushFileBuffers (hFile=0xa94) returned 1
	[0087.800] CloseHandle (hObject=0xa94) returned 1
	[0087.829] _swprintf (in: param_1=0x4e39f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 278
	[0087.829] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.829] free (_Block=0x3287898) 
	[0087.829] RtlExitUserThread (Status=0x0) 

Thread:
	id = 476
	os_tid = 0x1330

	[0086.746] _alloca_probe () returned 0x40328a
	[0086.746] GetCurrentThreadId () returned 0x1330
	[0086.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa44
	[0087.260] GetFileSizeEx (in: hFile=0xa44, lpFileSize=0x4f7ff5c | out: lpFileSize=0x4f7ff5c*=527985) returned 1
	[0087.261] CreateFileMappingA (hFile=0xa44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e71, lpName=0x0) returned 0xa3c
	[0087.261] MapViewOfFile (hFileMappingObject=0xa3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x55c0000
	[0087.403] UnmapViewOfFile (lpBaseAddress=0x55c0000) returned 1
	[0087.408] CloseHandle (hObject=0xa3c) returned 1
	[0087.408] GetCurrentThreadId () returned 0x1330
	[0087.408] FlushFileBuffers (hFile=0xa44) returned 1
	[0087.807] CloseHandle (hObject=0xa44) returned 1
	[0087.833] _swprintf (in: param_1=0x4f79f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 278
	[0087.833] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.833] free (_Block=0x3286890) 
	[0087.833] RtlExitUserThread (Status=0x0) 

Thread:
	id = 477
	os_tid = 0x121c

	[0086.748] _alloca_probe () returned 0x40328a
	[0086.748] GetCurrentThreadId () returned 0x121c
	[0086.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4c
	[0087.262] GetFileSizeEx (in: hFile=0xa4c, lpFileSize=0x50bff5c | out: lpFileSize=0x50bff5c*=1281) returned 1
	[0087.262] CreateFileMappingA (hFile=0xa4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0xa34
	[0087.262] MapViewOfFile (hFileMappingObject=0xa34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.269] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.269] CloseHandle (hObject=0xa34) returned 1
	[0087.269] GetCurrentThreadId () returned 0x121c
	[0087.269] FlushFileBuffers (hFile=0xa4c) returned 1
	[0087.803] CloseHandle (hObject=0xa4c) returned 1
	[0087.830] _swprintf (in: param_1=0x50b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 278
	[0087.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0
	[0087.830] free (_Block=0x32918e8) 
	[0087.830] RtlExitUserThread (Status=0x0) 

Thread:
	id = 478
	os_tid = 0x1218

	[0086.749] _alloca_probe () returned 0x40328a
	[0086.750] GetCurrentThreadId () returned 0x1218
	[0086.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa2c
	[0087.268] GetFileSizeEx (in: hFile=0xa2c, lpFileSize=0x51fff5c | out: lpFileSize=0x51fff5c*=3409) returned 1
	[0087.268] CreateFileMappingA (hFile=0xa2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd51, lpName=0x0) returned 0xa24
	[0087.268] MapViewOfFile (hFileMappingObject=0xa24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0087.276] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0087.276] CloseHandle (hObject=0xa24) returned 1
	[0087.276] GetCurrentThreadId () returned 0x1218
	[0087.276] FlushFileBuffers (hFile=0xa2c) returned 1
	[0087.806] CloseHandle (hObject=0xa2c) returned 1
	[0087.831] _swprintf (in: param_1=0x51f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 278
	[0087.831] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0
	[0087.832] free (_Block=0x32908e0) 
	[0087.832] RtlExitUserThread (Status=0x0) 

Thread:
	id = 479
	os_tid = 0x11f0

	[0086.751] _alloca_probe () returned 0x40328a
	[0086.751] GetCurrentThreadId () returned 0x11f0
	[0086.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml", dwFileAttributes=0x80) returned 1
	[0087.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa34
	[0087.269] GetFileSizeEx (in: hFile=0xa34, lpFileSize=0x533ff5c | out: lpFileSize=0x533ff5c*=2173073) returned 1
	[0087.269] CreateFileMappingA (hFile=0xa34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x212891, lpName=0x0) returned 0xb10
	[0087.269] MapViewOfFile (hFileMappingObject=0xb10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5650000
	[0087.756] UnmapViewOfFile (lpBaseAddress=0x5650000) returned 1
	[0087.775] CloseHandle (hObject=0xb10) returned 1
	[0087.775] GetCurrentThreadId () returned 0x11f0
	[0087.775] FlushFileBuffers (hFile=0xa34) returned 1
	[0087.817] CloseHandle (hObject=0xa34) returned 1
	[0087.834] _swprintf (in: param_1=0x5339f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 248
	[0087.834] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.common.xml")) returned 1
	[0087.837] free (_Block=0x32928f0) 
	[0087.837] RtlExitUserThread (Status=0x0) 

Thread:
	id = 480
	os_tid = 0x127c

	[0086.753] _alloca_probe () returned 0x40328a
	[0086.753] GetCurrentThreadId () returned 0x127c
	[0086.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0087.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa24
	[0087.277] GetFileSizeEx (in: hFile=0xa24, lpFileSize=0x547ff5c | out: lpFileSize=0x547ff5c*=9857) returned 1
	[0087.277] CreateFileMappingA (hFile=0xa24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2681, lpName=0x0) returned 0xb14
	[0087.277] MapViewOfFile (hFileMappingObject=0xb14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.296] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.296] CloseHandle (hObject=0xb14) returned 1
	[0087.296] GetCurrentThreadId () returned 0x127c
	[0087.296] FlushFileBuffers (hFile=0xa24) returned 1
	[0087.804] CloseHandle (hObject=0xa24) returned 1
	[0087.831] _swprintf (in: param_1=0x5479f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 250
	[0087.831] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0087.836] free (_Block=0x3294900) 
	[0087.836] RtlExitUserThread (Status=0x0) 

Thread:
	id = 481
	os_tid = 0xd44

	[0086.754] _alloca_probe () returned 0x40328a
	[0086.754] GetCurrentThreadId () returned 0xd44
	[0086.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0087.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb18
	[0087.294] GetFileSizeEx (in: hFile=0xb18, lpFileSize=0x55bff5c | out: lpFileSize=0x55bff5c*=385) returned 1
	[0087.294] CreateFileMappingA (hFile=0xb18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181, lpName=0x0) returned 0xb1c
	[0087.294] MapViewOfFile (hFileMappingObject=0xb1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0087.324] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0087.324] CloseHandle (hObject=0xb1c) returned 1
	[0087.324] GetCurrentThreadId () returned 0xd44
	[0087.325] FlushFileBuffers (hFile=0xb18) returned 1
	[0087.806] CloseHandle (hObject=0xb18) returned 1
	[0087.832] _swprintf (in: param_1=0x55b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 247
	[0087.832] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0087.837] free (_Block=0x328f8d8) 
	[0087.837] RtlExitUserThread (Status=0x0) 

Thread:
	id = 482
	os_tid = 0x125c

	[0087.865] _alloca_probe () returned 0x40328a
	[0087.865] GetCurrentThreadId () returned 0x125c
	[0087.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0087.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa2c
	[0087.867] GetFileSizeEx (in: hFile=0xa2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9024) returned 1
	[0087.867] CreateFileMappingA (hFile=0xa2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xa24
	[0087.867] MapViewOfFile (hFileMappingObject=0xa24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.869] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.869] CloseHandle (hObject=0xa24) returned 1
	[0087.869] GetCurrentThreadId () returned 0x125c
	[0087.869] FlushFileBuffers (hFile=0xa2c) returned 1
	[0087.876] CloseHandle (hObject=0xa2c) returned 1
	[0087.876] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif") returned 97
	[0087.876] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0087.877] free (_Block=0x3284880) 
	[0087.877] RtlExitUserThread (Status=0x0) 

Thread:
	id = 483
	os_tid = 0x1804

	[0087.873] _alloca_probe () returned 0x40328a
	[0087.874] GetCurrentThreadId () returned 0x1804
	[0087.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0087.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4c
	[0087.875] GetFileSizeEx (in: hFile=0xa4c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=7216) returned 1
	[0087.875] CreateFileMappingA (hFile=0xa4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xa94
	[0087.875] MapViewOfFile (hFileMappingObject=0xa94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.878] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.878] CloseHandle (hObject=0xa94) returned 1
	[0087.878] GetCurrentThreadId () returned 0x1804
	[0087.878] FlushFileBuffers (hFile=0xa4c) returned 1
	[0087.881] CloseHandle (hObject=0xa4c) returned 1
	[0087.881] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif") returned 97
	[0087.881] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0087.881] free (_Block=0x32888a0) 
	[0087.881] RtlExitUserThread (Status=0x0) 

Thread:
	id = 484
	os_tid = 0x1808

	[0087.882] _alloca_probe () returned 0x40328a
	[0087.883] GetCurrentThreadId () returned 0x1808
	[0087.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0087.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa94
	[0087.883] GetFileSizeEx (in: hFile=0xa94, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=14873) returned 1
	[0087.883] CreateFileMappingA (hFile=0xa94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xa2c
	[0087.883] MapViewOfFile (hFileMappingObject=0xa2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.887] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.887] CloseHandle (hObject=0xa2c) returned 1
	[0087.887] GetCurrentThreadId () returned 0x1808
	[0087.887] FlushFileBuffers (hFile=0xa94) returned 1
	[0087.890] CloseHandle (hObject=0xa94) returned 1
	[0087.891] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif") returned 97
	[0087.891] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0087.891] free (_Block=0x3284880) 
	[0087.891] RtlExitUserThread (Status=0x0) 

Thread:
	id = 485
	os_tid = 0x180c

	[0087.888] _alloca_probe () returned 0x40328a
	[0087.889] GetCurrentThreadId () returned 0x180c
	[0087.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0087.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa54
	[0087.890] GetFileSizeEx (in: hFile=0xa54, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=6684) returned 1
	[0087.890] CreateFileMappingA (hFile=0xa54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a27, lpName=0x0) returned 0xa5c
	[0087.890] MapViewOfFile (hFileMappingObject=0xa5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.893] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.893] CloseHandle (hObject=0xa5c) returned 1
	[0087.893] GetCurrentThreadId () returned 0x180c
	[0087.893] FlushFileBuffers (hFile=0xa54) returned 1
	[0087.895] CloseHandle (hObject=0xa54) returned 1
	[0087.895] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif") returned 97
	[0087.896] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0087.896] free (_Block=0x32898a8) 
	[0087.896] RtlExitUserThread (Status=0x0) 

Thread:
	id = 486
	os_tid = 0x1810

	[0087.897] _alloca_probe () returned 0x40328a
	[0087.898] GetCurrentThreadId () returned 0x1810
	[0087.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0087.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa5c
	[0087.898] GetFileSizeEx (in: hFile=0xa5c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3251) returned 1
	[0087.898] CreateFileMappingA (hFile=0xa5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb5, lpName=0x0) returned 0xa94
	[0087.898] MapViewOfFile (hFileMappingObject=0xa94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.900] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.900] CloseHandle (hObject=0xa94) returned 1
	[0087.900] GetCurrentThreadId () returned 0x1810
	[0087.900] FlushFileBuffers (hFile=0xa5c) returned 1
	[0087.905] CloseHandle (hObject=0xa5c) returned 1
	[0087.906] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif") returned 97
	[0087.906] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0087.906] free (_Block=0x3284880) 
	[0087.906] RtlExitUserThread (Status=0x0) 

Thread:
	id = 487
	os_tid = 0x1814

	[0087.904] _alloca_probe () returned 0x40328a
	[0087.904] GetCurrentThreadId () returned 0x1814
	[0087.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0087.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa4
	[0087.905] GetFileSizeEx (in: hFile=0xaa4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=8097) returned 1
	[0087.905] CreateFileMappingA (hFile=0xaa4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xa6c
	[0087.905] MapViewOfFile (hFileMappingObject=0xa6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.908] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.908] CloseHandle (hObject=0xa6c) returned 1
	[0087.908] GetCurrentThreadId () returned 0x1814
	[0087.908] FlushFileBuffers (hFile=0xaa4) returned 1
	[0087.911] CloseHandle (hObject=0xaa4) returned 1
	[0087.911] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif") returned 97
	[0087.911] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0087.911] free (_Block=0x3286890) 
	[0087.912] RtlExitUserThread (Status=0x0) 

Thread:
	id = 488
	os_tid = 0x1818

	[0087.912] _alloca_probe () returned 0x40328a
	[0087.913] GetCurrentThreadId () returned 0x1818
	[0087.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0087.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa6c
	[0087.914] GetFileSizeEx (in: hFile=0xa6c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7686) returned 1
	[0087.914] CreateFileMappingA (hFile=0xa6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e0b, lpName=0x0) returned 0xa5c
	[0087.914] MapViewOfFile (hFileMappingObject=0xa5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.916] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.916] CloseHandle (hObject=0xa5c) returned 1
	[0087.916] GetCurrentThreadId () returned 0x1818
	[0087.916] FlushFileBuffers (hFile=0xa6c) returned 1
	[0087.922] CloseHandle (hObject=0xa6c) returned 1
	[0087.922] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif") returned 97
	[0087.922] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0087.923] free (_Block=0x32898a8) 
	[0087.923] RtlExitUserThread (Status=0x0) 

Thread:
	id = 489
	os_tid = 0x181c

	[0087.919] _alloca_probe () returned 0x40328a
	[0087.920] GetCurrentThreadId () returned 0x181c
	[0087.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0087.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa64
	[0087.921] GetFileSizeEx (in: hFile=0xa64, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=11891) returned 1
	[0087.921] CreateFileMappingA (hFile=0xa64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e75, lpName=0x0) returned 0xa74
	[0087.921] MapViewOfFile (hFileMappingObject=0xa74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0087.925] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0087.925] CloseHandle (hObject=0xa74) returned 1
	[0087.925] GetCurrentThreadId () returned 0x181c
	[0087.925] FlushFileBuffers (hFile=0xa64) returned 1
	[0087.928] CloseHandle (hObject=0xa64) returned 1
	[0087.928] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif") returned 97
	[0087.928] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0087.929] free (_Block=0x3284880) 
	[0087.929] RtlExitUserThread (Status=0x0) 

Thread:
	id = 490
	os_tid = 0x1820

	[0088.080] _alloca_probe () returned 0x40328a
	[0088.080] GetCurrentThreadId () returned 0x1820
	[0088.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0088.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa74
	[0088.082] GetFileSizeEx (in: hFile=0xa74, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=517) returned 1
	[0088.082] CreateFileMappingA (hFile=0xa74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x209, lpName=0x0) returned 0xa6c
	[0088.082] MapViewOfFile (hFileMappingObject=0xa6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.083] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.083] CloseHandle (hObject=0xa6c) returned 1
	[0088.083] GetCurrentThreadId () returned 0x1820
	[0088.083] FlushFileBuffers (hFile=0xa74) returned 1
	[0088.084] CloseHandle (hObject=0xa74) returned 1
	[0088.085] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif") returned 97
	[0088.085] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0088.085] free (_Block=0x328c8c0) 
	[0088.085] RtlExitUserThread (Status=0x0) 

Thread:
	id = 491
	os_tid = 0x1824

	[0088.087] _alloca_probe () returned 0x40328a
	[0088.087] GetCurrentThreadId () returned 0x1824
	[0088.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0088.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa6c
	[0088.088] GetFileSizeEx (in: hFile=0xa6c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=502) returned 1
	[0088.088] CreateFileMappingA (hFile=0xa6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fb, lpName=0x0) returned 0xa8c
	[0088.088] MapViewOfFile (hFileMappingObject=0xa8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.088] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.088] CloseHandle (hObject=0xa8c) returned 1
	[0088.088] GetCurrentThreadId () returned 0x1824
	[0088.088] FlushFileBuffers (hFile=0xa6c) returned 1
	[0088.092] CloseHandle (hObject=0xa6c) returned 1
	[0088.093] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif") returned 97
	[0088.093] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0088.093] free (_Block=0x3287898) 
	[0088.093] RtlExitUserThread (Status=0x0) 

Thread:
	id = 492
	os_tid = 0x1828

	[0088.094] _alloca_probe () returned 0x40328a
	[0088.095] GetCurrentThreadId () returned 0x1828
	[0088.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0088.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8c
	[0088.095] GetFileSizeEx (in: hFile=0xa8c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12702) returned 1
	[0088.095] CreateFileMappingA (hFile=0xa8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31ab, lpName=0x0) returned 0xa7c
	[0088.095] MapViewOfFile (hFileMappingObject=0xa7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.098] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.099] CloseHandle (hObject=0xa7c) returned 1
	[0088.099] GetCurrentThreadId () returned 0x1828
	[0088.099] FlushFileBuffers (hFile=0xa8c) returned 1
	[0088.101] CloseHandle (hObject=0xa8c) returned 1
	[0088.101] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif") returned 97
	[0088.101] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0088.102] free (_Block=0x3284880) 
	[0088.102] RtlExitUserThread (Status=0x0) 

Thread:
	id = 493
	os_tid = 0x182c

	[0088.184] _alloca_probe () returned 0x40328a
	[0088.185] GetCurrentThreadId () returned 0x182c
	[0088.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0088.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa7c
	[0088.185] GetFileSizeEx (in: hFile=0xa7c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3484) returned 1
	[0088.185] CreateFileMappingA (hFile=0xa7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xda7, lpName=0x0) returned 0xaac
	[0088.185] MapViewOfFile (hFileMappingObject=0xaac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.187] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.187] CloseHandle (hObject=0xaac) returned 1
	[0088.187] GetCurrentThreadId () returned 0x182c
	[0088.187] FlushFileBuffers (hFile=0xa7c) returned 1
	[0088.189] CloseHandle (hObject=0xa7c) returned 1
	[0088.190] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif") returned 97
	[0088.190] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0088.190] free (_Block=0x328c8c0) 
	[0088.190] RtlExitUserThread (Status=0x0) 

Thread:
	id = 494
	os_tid = 0x1830

	[0088.247] _alloca_probe () returned 0x40328a
	[0088.248] GetCurrentThreadId () returned 0x1830
	[0088.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0088.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaac
	[0088.248] GetFileSizeEx (in: hFile=0xaac, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3140) returned 1
	[0088.248] CreateFileMappingA (hFile=0xaac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc47, lpName=0x0) returned 0xabc
	[0088.249] MapViewOfFile (hFileMappingObject=0xabc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.250] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.250] CloseHandle (hObject=0xabc) returned 1
	[0088.250] GetCurrentThreadId () returned 0x1830
	[0088.250] FlushFileBuffers (hFile=0xaac) returned 1
	[0088.255] CloseHandle (hObject=0xaac) returned 1
	[0088.255] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif") returned 97
	[0088.255] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0088.256] free (_Block=0x3284880) 
	[0088.256] RtlExitUserThread (Status=0x0) 

Thread:
	id = 495
	os_tid = 0x1834

	[0088.252] _alloca_probe () returned 0x40328a
	[0088.252] GetCurrentThreadId () returned 0x1834
	[0088.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0088.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4
	[0088.254] GetFileSizeEx (in: hFile=0xad4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=12482) returned 1
	[0088.254] CreateFileMappingA (hFile=0xad4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30c3, lpName=0x0) returned 0xa84
	[0088.254] MapViewOfFile (hFileMappingObject=0xa84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.259] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.260] CloseHandle (hObject=0xa84) returned 1
	[0088.260] GetCurrentThreadId () returned 0x1834
	[0088.260] FlushFileBuffers (hFile=0xad4) returned 1
	[0088.262] CloseHandle (hObject=0xad4) returned 1
	[0088.262] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif") returned 97
	[0088.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0088.263] free (_Block=0x328c8c0) 
	[0088.263] RtlExitUserThread (Status=0x0) 

Thread:
	id = 496
	os_tid = 0x1838

	[0088.265] _alloca_probe () returned 0x40328a
	[0088.265] GetCurrentThreadId () returned 0x1838
	[0088.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0088.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa84
	[0088.266] GetFileSizeEx (in: hFile=0xa84, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5253) returned 1
	[0088.266] CreateFileMappingA (hFile=0xa84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1489, lpName=0x0) returned 0xaac
	[0088.266] MapViewOfFile (hFileMappingObject=0xaac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.268] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.268] CloseHandle (hObject=0xaac) returned 1
	[0088.269] GetCurrentThreadId () returned 0x1838
	[0088.269] FlushFileBuffers (hFile=0xa84) returned 1
	[0088.274] CloseHandle (hObject=0xa84) returned 1
	[0088.274] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif") returned 97
	[0088.274] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0088.275] free (_Block=0x3286890) 
	[0088.275] RtlExitUserThread (Status=0x0) 

Thread:
	id = 497
	os_tid = 0x183c

	[0088.318] _alloca_probe () returned 0x40328a
	[0088.319] GetCurrentThreadId () returned 0x183c
	[0088.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0088.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaac
	[0088.320] GetFileSizeEx (in: hFile=0xaac, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=2596) returned 1
	[0088.320] CreateFileMappingA (hFile=0xaac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa27, lpName=0x0) returned 0xadc
	[0088.320] MapViewOfFile (hFileMappingObject=0xadc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.321] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.321] CloseHandle (hObject=0xadc) returned 1
	[0088.321] GetCurrentThreadId () returned 0x183c
	[0088.321] FlushFileBuffers (hFile=0xaac) returned 1
	[0088.324] CloseHandle (hObject=0xaac) returned 1
	[0088.325] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif") returned 97
	[0088.325] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0088.326] free (_Block=0x32888a0) 
	[0088.326] RtlExitUserThread (Status=0x0) 

Thread:
	id = 498
	os_tid = 0x1840

	[0088.323] _alloca_probe () returned 0x40328a
	[0088.324] GetCurrentThreadId () returned 0x1840
	[0088.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0088.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa9c
	[0088.324] GetFileSizeEx (in: hFile=0xa9c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=10607) returned 1
	[0088.324] CreateFileMappingA (hFile=0xa9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x297d, lpName=0x0) returned 0xab4
	[0088.324] MapViewOfFile (hFileMappingObject=0xab4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.328] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.328] CloseHandle (hObject=0xab4) returned 1
	[0088.328] GetCurrentThreadId () returned 0x1840
	[0088.328] FlushFileBuffers (hFile=0xa9c) returned 1
	[0088.330] CloseHandle (hObject=0xa9c) returned 1
	[0088.331] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif") returned 97
	[0088.331] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0088.331] free (_Block=0x3284880) 
	[0088.331] RtlExitUserThread (Status=0x0) 

Thread:
	id = 499
	os_tid = 0x1844

	[0088.332] _alloca_probe () returned 0x40328a
	[0088.333] GetCurrentThreadId () returned 0x1844
	[0088.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0088.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab4
	[0088.334] GetFileSizeEx (in: hFile=0xab4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=15308) returned 1
	[0088.334] CreateFileMappingA (hFile=0xab4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bd7, lpName=0x0) returned 0xaac
	[0088.334] MapViewOfFile (hFileMappingObject=0xaac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.337] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.338] CloseHandle (hObject=0xaac) returned 1
	[0088.338] GetCurrentThreadId () returned 0x1844
	[0088.338] FlushFileBuffers (hFile=0xab4) returned 1
	[0088.340] CloseHandle (hObject=0xab4) returned 1
	[0088.341] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif") returned 97
	[0088.341] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0088.341] free (_Block=0x328c8c0) 
	[0088.341] RtlExitUserThread (Status=0x0) 

Thread:
	id = 500
	os_tid = 0x1848

	[0088.382] _alloca_probe () returned 0x40328a
	[0088.382] GetCurrentThreadId () returned 0x1848
	[0088.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0088.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaac
	[0088.383] GetFileSizeEx (in: hFile=0xaac, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=5315) returned 1
	[0088.383] CreateFileMappingA (hFile=0xaac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14c5, lpName=0x0) returned 0xb10
	[0088.383] MapViewOfFile (hFileMappingObject=0xb10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.385] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.385] CloseHandle (hObject=0xb10) returned 1
	[0088.385] GetCurrentThreadId () returned 0x1848
	[0088.385] FlushFileBuffers (hFile=0xaac) returned 1
	[0088.387] CloseHandle (hObject=0xaac) returned 1
	[0088.388] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif") returned 97
	[0088.388] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0088.388] free (_Block=0x3287898) 
	[0088.388] RtlExitUserThread (Status=0x0) 

Thread:
	id = 501
	os_tid = 0x184c

	[0088.434] _alloca_probe () returned 0x40328a
	[0088.435] GetCurrentThreadId () returned 0x184c
	[0088.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0088.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb10
	[0088.436] GetFileSizeEx (in: hFile=0xb10, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=4955) returned 1
	[0088.436] CreateFileMappingA (hFile=0xb10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1365, lpName=0x0) returned 0xaec
	[0088.436] MapViewOfFile (hFileMappingObject=0xaec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.437] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.438] CloseHandle (hObject=0xaec) returned 1
	[0088.438] GetCurrentThreadId () returned 0x184c
	[0088.438] FlushFileBuffers (hFile=0xb10) returned 1
	[0088.441] CloseHandle (hObject=0xb10) returned 1
	[0088.442] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif") returned 97
	[0088.442] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0088.442] free (_Block=0x32888a0) 
	[0088.442] RtlExitUserThread (Status=0x0) 

Thread:
	id = 502
	os_tid = 0x1850

	[0088.440] _alloca_probe () returned 0x40328a
	[0088.440] GetCurrentThreadId () returned 0x1850
	[0088.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0088.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac4
	[0088.441] GetFileSizeEx (in: hFile=0xac4, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=5030) returned 1
	[0088.441] CreateFileMappingA (hFile=0xac4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13ab, lpName=0x0) returned 0xacc
	[0088.441] MapViewOfFile (hFileMappingObject=0xacc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2450000
	[0088.444] UnmapViewOfFile (lpBaseAddress=0x2450000) returned 1
	[0088.444] CloseHandle (hObject=0xacc) returned 1
	[0088.444] GetCurrentThreadId () returned 0x1850
	[0088.444] FlushFileBuffers (hFile=0xac4) returned 1
	[0088.446] CloseHandle (hObject=0xac4) returned 1
	[0088.446] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif") returned 97
	[0088.446] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0088.447] free (_Block=0x32898a8) 
	[0088.447] RtlExitUserThread (Status=0x0) 

Thread:
	id = 503
	os_tid = 0x1854

	[0088.448] _alloca_probe () returned 0x40328a
	[0088.449] GetCurrentThreadId () returned 0x1854
	[0088.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0088.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xacc
	[0088.449] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=1146) returned 1
	[0088.449] CreateFileMappingA (hFile=0xacc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x483, lpName=0x0) returned 0xb10
	[0088.449] MapViewOfFile (hFileMappingObject=0xb10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.450] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.450] CloseHandle (hObject=0xb10) returned 1
	[0088.450] GetCurrentThreadId () returned 0x1854
	[0088.450] FlushFileBuffers (hFile=0xacc) returned 1
	[0088.452] CloseHandle (hObject=0xacc) returned 1
	[0088.453] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif") returned 97
	[0088.453] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0088.453] free (_Block=0x3284880) 
	[0088.453] RtlExitUserThread (Status=0x0) 

Thread:
	id = 504
	os_tid = 0x1858

	[0088.454] _alloca_probe () returned 0x40328a
	[0088.454] GetCurrentThreadId () returned 0x1858
	[0088.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0088.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xacc
	[0088.455] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=7583) returned 1
	[0088.455] CreateFileMappingA (hFile=0xacc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dad, lpName=0x0) returned 0xae4
	[0088.455] MapViewOfFile (hFileMappingObject=0xae4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2450000
	[0088.457] UnmapViewOfFile (lpBaseAddress=0x2450000) returned 1
	[0088.457] CloseHandle (hObject=0xae4) returned 1
	[0088.458] GetCurrentThreadId () returned 0x1858
	[0088.458] FlushFileBuffers (hFile=0xacc) returned 1
	[0088.464] CloseHandle (hObject=0xacc) returned 1
	[0088.464] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif") returned 97
	[0088.464] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0088.465] free (_Block=0x3286890) 
	[0088.465] RtlExitUserThread (Status=0x0) 

Thread:
	id = 505
	os_tid = 0x185c

	[0088.460] _alloca_probe () returned 0x40328a
	[0088.460] GetCurrentThreadId () returned 0x185c
	[0088.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0088.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb04
	[0088.461] GetFileSizeEx (in: hFile=0xb04, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=6984) returned 1
	[0088.461] CreateFileMappingA (hFile=0xb04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b4f, lpName=0x0) returned 0xaf4
	[0088.461] MapViewOfFile (hFileMappingObject=0xaf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2490000
	[0088.463] UnmapViewOfFile (lpBaseAddress=0x2490000) returned 1
	[0088.463] CloseHandle (hObject=0xaf4) returned 1
	[0088.464] GetCurrentThreadId () returned 0x185c
	[0088.464] FlushFileBuffers (hFile=0xb04) returned 1
	[0088.466] CloseHandle (hObject=0xb04) returned 1
	[0088.467] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif") returned 97
	[0088.467] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0088.467] free (_Block=0x3287898) 
	[0088.467] RtlExitUserThread (Status=0x0) 

Thread:
	id = 506
	os_tid = 0x1860

	[0088.469] _alloca_probe () returned 0x40328a
	[0088.470] GetCurrentThreadId () returned 0x1860
	[0088.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0088.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xacc
	[0088.470] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=13254) returned 1
	[0088.470] CreateFileMappingA (hFile=0xacc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33cb, lpName=0x0) returned 0xaf4
	[0088.470] MapViewOfFile (hFileMappingObject=0xaf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.490] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.490] CloseHandle (hObject=0xaf4) returned 1
	[0088.490] GetCurrentThreadId () returned 0x1860
	[0088.490] FlushFileBuffers (hFile=0xacc) returned 1
	[0088.500] CloseHandle (hObject=0xacc) returned 1
	[0088.502] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif") returned 97
	[0088.502] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0088.516] free (_Block=0x3284880) 
	[0088.516] RtlExitUserThread (Status=0x0) 

Thread:
	id = 507
	os_tid = 0x1864

	[0088.471] _alloca_probe () returned 0x40328a
	[0088.472] GetCurrentThreadId () returned 0x1864
	[0088.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0088.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0c
	[0088.473] GetFileSizeEx (in: hFile=0xb0c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=8582) returned 1
	[0088.473] CreateFileMappingA (hFile=0xb0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x218b, lpName=0x0) returned 0xa3c
	[0088.473] MapViewOfFile (hFileMappingObject=0xa3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0088.487] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0088.487] CloseHandle (hObject=0xa3c) returned 1
	[0088.487] GetCurrentThreadId () returned 0x1864
	[0088.487] FlushFileBuffers (hFile=0xb0c) returned 1
	[0088.498] CloseHandle (hObject=0xb0c) returned 1
	[0088.498] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif") returned 97
	[0088.498] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0088.514] free (_Block=0x3285888) 
	[0088.514] RtlExitUserThread (Status=0x0) 

Thread:
	id = 508
	os_tid = 0x1868

	[0088.474] _alloca_probe () returned 0x40328a
	[0088.474] GetCurrentThreadId () returned 0x1868
	[0088.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0088.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb14
	[0088.475] GetFileSizeEx (in: hFile=0xb14, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=4894) returned 1
	[0088.475] CreateFileMappingA (hFile=0xb14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x132b, lpName=0x0) returned 0xb20
	[0088.475] MapViewOfFile (hFileMappingObject=0xb20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33f0000
	[0088.484] UnmapViewOfFile (lpBaseAddress=0x33f0000) returned 1
	[0088.484] CloseHandle (hObject=0xb20) returned 1
	[0088.484] GetCurrentThreadId () returned 0x1868
	[0088.484] FlushFileBuffers (hFile=0xb14) returned 1
	[0088.500] CloseHandle (hObject=0xb14) returned 1
	[0088.502] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif") returned 97
	[0088.502] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0088.516] free (_Block=0x328c8c0) 
	[0088.516] RtlExitUserThread (Status=0x0) 

Thread:
	id = 509
	os_tid = 0x186c

	[0088.476] _alloca_probe () returned 0x40328a
	[0088.477] GetCurrentThreadId () returned 0x186c
	[0088.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0088.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb28
	[0088.478] GetFileSizeEx (in: hFile=0xb28, lpFileSize=0x353ff5c | out: lpFileSize=0x353ff5c*=5375) returned 1
	[0088.478] CreateFileMappingA (hFile=0xb28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x150d, lpName=0x0) returned 0xb2c
	[0088.478] MapViewOfFile (hFileMappingObject=0xb2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3540000
	[0088.482] UnmapViewOfFile (lpBaseAddress=0x3540000) returned 1
	[0088.482] CloseHandle (hObject=0xb2c) returned 1
	[0088.482] GetCurrentThreadId () returned 0x186c
	[0088.482] FlushFileBuffers (hFile=0xb28) returned 1
	[0088.496] CloseHandle (hObject=0xb28) returned 1
	[0088.496] _swprintf (in: param_1=0x3539f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif") returned 97
	[0088.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0088.497] free (_Block=0x328d8c8) 
	[0088.497] RtlExitUserThread (Status=0x0) 

Thread:
	id = 510
	os_tid = 0x1870

	[0088.479] _alloca_probe () returned 0x40328a
	[0088.480] GetCurrentThreadId () returned 0x1870
	[0088.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0088.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb34
	[0088.480] GetFileSizeEx (in: hFile=0xb34, lpFileSize=0x368ff5c | out: lpFileSize=0x368ff5c*=9248) returned 1
	[0088.480] CreateFileMappingA (hFile=0xb34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xb38
	[0088.480] MapViewOfFile (hFileMappingObject=0xb38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3690000
	[0088.493] UnmapViewOfFile (lpBaseAddress=0x3690000) returned 1
	[0088.493] CloseHandle (hObject=0xb38) returned 1
	[0088.493] GetCurrentThreadId () returned 0x1870
	[0088.493] FlushFileBuffers (hFile=0xb34) returned 1
	[0088.500] CloseHandle (hObject=0xb34) returned 1
	[0088.500] _swprintf (in: param_1=0x3689f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif") returned 97
	[0088.500] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0088.515] free (_Block=0x3286890) 
	[0088.515] RtlExitUserThread (Status=0x0) 

Thread:
	id = 511
	os_tid = 0x1874

	[0088.518] _alloca_probe () returned 0x40328a
	[0088.518] GetCurrentThreadId () returned 0x1874
	[0088.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0088.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb14
	[0088.518] GetFileSizeEx (in: hFile=0xb14, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5016) returned 1
	[0088.519] CreateFileMappingA (hFile=0xb14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x139f, lpName=0x0) returned 0xb34
	[0088.519] MapViewOfFile (hFileMappingObject=0xb34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.520] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.520] CloseHandle (hObject=0xb34) returned 1
	[0088.520] GetCurrentThreadId () returned 0x1874
	[0088.520] FlushFileBuffers (hFile=0xb14) returned 1
	[0088.523] CloseHandle (hObject=0xb14) returned 1
	[0088.524] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif") returned 97
	[0088.524] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0088.524] free (_Block=0x32898a8) 
	[0088.524] RtlExitUserThread (Status=0x0) 

Thread:
	id = 512
	os_tid = 0x1878

	[0088.525] _alloca_probe () returned 0x40328a
	[0088.525] GetCurrentThreadId () returned 0x1878
	[0088.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0088.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb14
	[0088.526] GetFileSizeEx (in: hFile=0xb14, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=4390) returned 1
	[0088.526] CreateFileMappingA (hFile=0xb14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112b, lpName=0x0) returned 0xb0c
	[0088.526] MapViewOfFile (hFileMappingObject=0xb0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.528] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.528] CloseHandle (hObject=0xb0c) returned 1
	[0088.528] GetCurrentThreadId () returned 0x1878
	[0088.528] FlushFileBuffers (hFile=0xb14) returned 1
	[0088.531] CloseHandle (hObject=0xb14) returned 1
	[0088.531] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif") returned 97
	[0088.531] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0088.533] free (_Block=0x3284880) 
	[0088.533] RtlExitUserThread (Status=0x0) 

Thread:
	id = 513
	os_tid = 0x187c

	[0088.530] _alloca_probe () returned 0x40328a
	[0088.530] GetCurrentThreadId () returned 0x187c
	[0088.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0088.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb28
	[0088.532] GetFileSizeEx (in: hFile=0xb28, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3966) returned 1
	[0088.532] CreateFileMappingA (hFile=0xb28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf8b, lpName=0x0) returned 0xb38
	[0088.532] MapViewOfFile (hFileMappingObject=0xb38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.534] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.534] CloseHandle (hObject=0xb38) returned 1
	[0088.534] GetCurrentThreadId () returned 0x187c
	[0088.534] FlushFileBuffers (hFile=0xb28) returned 1
	[0088.536] CloseHandle (hObject=0xb28) returned 1
	[0088.536] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif") returned 97
	[0088.536] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0088.537] free (_Block=0x32888a0) 
	[0088.537] RtlExitUserThread (Status=0x0) 

Thread:
	id = 514
	os_tid = 0x1880

	[0088.585] _alloca_probe () returned 0x40328a
	[0088.585] GetCurrentThreadId () returned 0x1880
	[0088.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0088.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb38
	[0088.586] GetFileSizeEx (in: hFile=0xb38, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3378) returned 1
	[0088.586] CreateFileMappingA (hFile=0xb38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd33, lpName=0x0) returned 0xb14
	[0088.586] MapViewOfFile (hFileMappingObject=0xb14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.588] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.588] CloseHandle (hObject=0xb14) returned 1
	[0088.588] GetCurrentThreadId () returned 0x1880
	[0088.588] FlushFileBuffers (hFile=0xb38) returned 1
	[0088.590] CloseHandle (hObject=0xb38) returned 1
	[0088.590] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif") returned 97
	[0088.590] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0088.591] free (_Block=0x32898a8) 
	[0088.591] RtlExitUserThread (Status=0x0) 

Thread:
	id = 515
	os_tid = 0x1884

	[0088.592] _alloca_probe () returned 0x40328a
	[0088.593] GetCurrentThreadId () returned 0x1884
	[0088.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0088.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb14
	[0088.593] GetFileSizeEx (in: hFile=0xb14, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3120) returned 1
	[0088.593] CreateFileMappingA (hFile=0xb14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xaf4
	[0088.594] MapViewOfFile (hFileMappingObject=0xaf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.595] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.595] CloseHandle (hObject=0xaf4) returned 1
	[0088.595] GetCurrentThreadId () returned 0x1884
	[0088.595] FlushFileBuffers (hFile=0xb14) returned 1
	[0088.597] CloseHandle (hObject=0xb14) returned 1
	[0088.597] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif") returned 97
	[0088.597] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0088.598] free (_Block=0x3284880) 
	[0088.598] RtlExitUserThread (Status=0x0) 

Thread:
	id = 516
	os_tid = 0x1888

	[0088.605] _alloca_probe () returned 0x40328a
	[0088.606] GetCurrentThreadId () returned 0x1888
	[0088.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0088.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaf4
	[0088.607] GetFileSizeEx (in: hFile=0xaf4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=13515) returned 1
	[0088.607] CreateFileMappingA (hFile=0xaf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34d5, lpName=0x0) returned 0xa3c
	[0088.607] MapViewOfFile (hFileMappingObject=0xa3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.610] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.610] CloseHandle (hObject=0xa3c) returned 1
	[0088.610] GetCurrentThreadId () returned 0x1888
	[0088.610] FlushFileBuffers (hFile=0xaf4) returned 1
	[0088.613] CloseHandle (hObject=0xaf4) returned 1
	[0088.613] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif") returned 97
	[0088.613] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0088.613] free (_Block=0x32888a0) 
	[0088.613] RtlExitUserThread (Status=0x0) 

Thread:
	id = 517
	os_tid = 0x188c

	[0088.651] _alloca_probe () returned 0x40328a
	[0088.651] GetCurrentThreadId () returned 0x188c
	[0088.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0088.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa3c
	[0088.652] GetFileSizeEx (in: hFile=0xa3c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=20189) returned 1
	[0088.652] CreateFileMappingA (hFile=0xa3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ee9, lpName=0x0) returned 0xb20
	[0088.653] MapViewOfFile (hFileMappingObject=0xb20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.657] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.657] CloseHandle (hObject=0xb20) returned 1
	[0088.657] GetCurrentThreadId () returned 0x188c
	[0088.657] FlushFileBuffers (hFile=0xa3c) returned 1
	[0088.659] CloseHandle (hObject=0xa3c) returned 1
	[0088.659] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif") returned 97
	[0088.659] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0088.660] free (_Block=0x3286890) 
	[0088.660] RtlExitUserThread (Status=0x0) 

Thread:
	id = 518
	os_tid = 0x1890

	[0088.746] _alloca_probe () returned 0x40328a
	[0088.747] GetCurrentThreadId () returned 0x1890
	[0088.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0088.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb20
	[0088.748] GetFileSizeEx (in: hFile=0xb20, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=20454) returned 1
	[0088.748] CreateFileMappingA (hFile=0xb20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4feb, lpName=0x0) returned 0xb2c
	[0088.748] MapViewOfFile (hFileMappingObject=0xb2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.752] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.752] CloseHandle (hObject=0xb2c) returned 1
	[0088.752] GetCurrentThreadId () returned 0x1890
	[0088.752] FlushFileBuffers (hFile=0xb20) returned 1
	[0088.763] CloseHandle (hObject=0xb20) returned 1
	[0088.763] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif") returned 97
	[0088.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0088.763] free (_Block=0x3284880) 
	[0088.763] RtlExitUserThread (Status=0x0) 

Thread:
	id = 519
	os_tid = 0x1894

	[0088.809] _alloca_probe () returned 0x40328a
	[0088.810] GetCurrentThreadId () returned 0x1894
	[0088.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0088.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb2c
	[0088.810] GetFileSizeEx (in: hFile=0xb2c, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=15733) returned 1
	[0088.810] CreateFileMappingA (hFile=0xb2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d79, lpName=0x0) returned 0xb3c
	[0088.810] MapViewOfFile (hFileMappingObject=0xb3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0088.814] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0088.814] CloseHandle (hObject=0xb3c) returned 1
	[0088.814] GetCurrentThreadId () returned 0x1894
	[0088.814] FlushFileBuffers (hFile=0xb2c) returned 1
	[0088.816] CloseHandle (hObject=0xb2c) returned 1
	[0088.816] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif") returned 97
	[0088.817] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0088.817] free (_Block=0x3286890) 
	[0088.817] RtlExitUserThread (Status=0x0) 

Thread:
	id = 520
	os_tid = 0x1898

	[0088.826] _alloca_probe () returned 0x40328a
	[0088.826] GetCurrentThreadId () returned 0x1898
	[0088.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0088.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb3c
	[0088.827] GetFileSizeEx (in: hFile=0xb3c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9024) returned 1
	[0088.827] CreateFileMappingA (hFile=0xb3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xb40
	[0088.827] MapViewOfFile (hFileMappingObject=0xb40, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.829] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.829] CloseHandle (hObject=0xb40) returned 1
	[0088.829] GetCurrentThreadId () returned 0x1898
	[0088.829] FlushFileBuffers (hFile=0xb3c) returned 1
	[0088.831] CloseHandle (hObject=0xb3c) returned 1
	[0088.831] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 126
	[0088.832] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0088.832] free (_Block=0x3284880) 
	[0088.832] RtlExitUserThread (Status=0x0) 

Thread:
	id = 521
	os_tid = 0x189c

	[0088.867] _alloca_probe () returned 0x40328a
	[0088.867] GetCurrentThreadId () returned 0x189c
	[0088.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0088.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb40
	[0088.868] GetFileSizeEx (in: hFile=0xb40, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7216) returned 1
	[0088.868] CreateFileMappingA (hFile=0xb40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xb44
	[0088.868] MapViewOfFile (hFileMappingObject=0xb44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.870] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.870] CloseHandle (hObject=0xb44) returned 1
	[0088.870] GetCurrentThreadId () returned 0x189c
	[0088.870] FlushFileBuffers (hFile=0xb40) returned 1
	[0088.871] CloseHandle (hObject=0xb40) returned 1
	[0088.872] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 126
	[0088.872] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0088.872] free (_Block=0x3284880) 
	[0088.872] RtlExitUserThread (Status=0x0) 

Thread:
	id = 522
	os_tid = 0x18a0

	[0088.874] _alloca_probe () returned 0x40328a
	[0088.874] GetCurrentThreadId () returned 0x18a0
	[0088.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0088.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb44
	[0088.874] GetFileSizeEx (in: hFile=0xb44, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=14881) returned 1
	[0088.874] CreateFileMappingA (hFile=0xb44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xb48
	[0088.874] MapViewOfFile (hFileMappingObject=0xb48, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.877] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.878] CloseHandle (hObject=0xb48) returned 1
	[0088.878] GetCurrentThreadId () returned 0x18a0
	[0088.878] FlushFileBuffers (hFile=0xb44) returned 1
	[0088.879] CloseHandle (hObject=0xb44) returned 1
	[0088.880] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 126
	[0088.880] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0088.880] free (_Block=0x32888a0) 
	[0088.880] RtlExitUserThread (Status=0x0) 

Thread:
	id = 523
	os_tid = 0x18a4

	[0088.882] _alloca_probe () returned 0x40328a
	[0088.882] GetCurrentThreadId () returned 0x18a4
	[0088.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0088.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb48
	[0088.882] GetFileSizeEx (in: hFile=0xb48, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=6695) returned 1
	[0088.882] CreateFileMappingA (hFile=0xb48, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a2d, lpName=0x0) returned 0xb4c
	[0088.883] MapViewOfFile (hFileMappingObject=0xb4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.884] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.884] CloseHandle (hObject=0xb4c) returned 1
	[0088.884] GetCurrentThreadId () returned 0x18a4
	[0088.884] FlushFileBuffers (hFile=0xb48) returned 1
	[0088.886] CloseHandle (hObject=0xb48) returned 1
	[0088.886] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 126
	[0088.886] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0088.887] free (_Block=0x3287898) 
	[0088.887] RtlExitUserThread (Status=0x0) 

Thread:
	id = 524
	os_tid = 0x18a8

	[0088.888] _alloca_probe () returned 0x40328a
	[0088.889] GetCurrentThreadId () returned 0x18a8
	[0088.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0088.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4c
	[0088.889] GetFileSizeEx (in: hFile=0xb4c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3253) returned 1
	[0088.889] CreateFileMappingA (hFile=0xb4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb9, lpName=0x0) returned 0xb50
	[0088.889] MapViewOfFile (hFileMappingObject=0xb50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.890] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.890] CloseHandle (hObject=0xb50) returned 1
	[0088.890] GetCurrentThreadId () returned 0x18a8
	[0088.890] FlushFileBuffers (hFile=0xb4c) returned 1
	[0088.892] CloseHandle (hObject=0xb4c) returned 1
	[0088.892] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 126
	[0088.892] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0088.893] free (_Block=0x3284880) 
	[0088.893] RtlExitUserThread (Status=0x0) 

Thread:
	id = 525
	os_tid = 0x18ac

	[0088.894] _alloca_probe () returned 0x40328a
	[0088.895] GetCurrentThreadId () returned 0x18ac
	[0088.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0088.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb50
	[0088.895] GetFileSizeEx (in: hFile=0xb50, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8097) returned 1
	[0088.895] CreateFileMappingA (hFile=0xb50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xb54
	[0088.895] MapViewOfFile (hFileMappingObject=0xb54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.897] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.897] CloseHandle (hObject=0xb54) returned 1
	[0088.897] GetCurrentThreadId () returned 0x18ac
	[0088.897] FlushFileBuffers (hFile=0xb50) returned 1
	[0088.904] CloseHandle (hObject=0xb50) returned 1
	[0088.905] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 126
	[0088.905] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0088.905] free (_Block=0x3287898) 
	[0088.905] RtlExitUserThread (Status=0x0) 

Thread:
	id = 526
	os_tid = 0x18b0

	[0088.903] _alloca_probe () returned 0x40328a
	[0088.903] GetCurrentThreadId () returned 0x18b0
	[0088.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0088.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb58
	[0088.904] GetFileSizeEx (in: hFile=0xb58, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=7691) returned 1
	[0088.904] CreateFileMappingA (hFile=0xb58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e15, lpName=0x0) returned 0xb5c
	[0088.904] MapViewOfFile (hFileMappingObject=0xb5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.907] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.907] CloseHandle (hObject=0xb5c) returned 1
	[0088.907] GetCurrentThreadId () returned 0x18b0
	[0088.907] FlushFileBuffers (hFile=0xb58) returned 1
	[0088.909] CloseHandle (hObject=0xb58) returned 1
	[0088.909] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 126
	[0088.909] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0088.910] free (_Block=0x32888a0) 
	[0088.910] RtlExitUserThread (Status=0x0) 

Thread:
	id = 527
	os_tid = 0x18b4

	[0088.911] _alloca_probe () returned 0x40328a
	[0088.912] GetCurrentThreadId () returned 0x18b4
	[0088.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0088.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb5c
	[0088.912] GetFileSizeEx (in: hFile=0xb5c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=11893) returned 1
	[0088.913] CreateFileMappingA (hFile=0xb5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e79, lpName=0x0) returned 0xb50
	[0088.913] MapViewOfFile (hFileMappingObject=0xb50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.915] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.915] CloseHandle (hObject=0xb50) returned 1
	[0088.915] GetCurrentThreadId () returned 0x18b4
	[0088.915] FlushFileBuffers (hFile=0xb5c) returned 1
	[0088.917] CloseHandle (hObject=0xb5c) returned 1
	[0088.917] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 126
	[0088.917] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0088.918] free (_Block=0x3287898) 
	[0088.918] RtlExitUserThread (Status=0x0) 

Thread:
	id = 528
	os_tid = 0x18b8

	[0088.919] _alloca_probe () returned 0x40328a
	[0088.920] GetCurrentThreadId () returned 0x18b8
	[0088.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0088.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb50
	[0088.920] GetFileSizeEx (in: hFile=0xb50, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=521) returned 1
	[0088.920] CreateFileMappingA (hFile=0xb50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xb60
	[0088.920] MapViewOfFile (hFileMappingObject=0xb60, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0088.921] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0088.921] CloseHandle (hObject=0xb60) returned 1
	[0088.921] GetCurrentThreadId () returned 0x18b8
	[0088.921] FlushFileBuffers (hFile=0xb50) returned 1
	[0088.922] CloseHandle (hObject=0xb50) returned 1
	[0088.923] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 126
	[0088.923] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0088.924] free (_Block=0x3287898) 
	[0088.924] RtlExitUserThread (Status=0x0) 

Thread:
	id = 529
	os_tid = 0x18bc

	[0088.926] _alloca_probe () returned 0x40328a
	[0088.927] GetCurrentThreadId () returned 0x18bc
	[0088.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0088.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb60
	[0088.927] GetFileSizeEx (in: hFile=0xb60, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=507) returned 1
	[0088.927] CreateFileMappingA (hFile=0xb60, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x205, lpName=0x0) returned 0xb64
	[0089.107] MapViewOfFile (hFileMappingObject=0xb64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.108] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.108] CloseHandle (hObject=0xb64) returned 1
	[0089.108] GetCurrentThreadId () returned 0x18bc
	[0089.108] FlushFileBuffers (hFile=0xb60) returned 1
	[0089.146] CloseHandle (hObject=0xb60) returned 1
	[0089.146] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 126
	[0089.146] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0089.148] free (_Block=0x3287898) 
	[0089.148] RtlExitUserThread (Status=0x0) 

Thread:
	id = 530
	os_tid = 0x18c0

	[0089.150] _alloca_probe () returned 0x40328a
	[0089.151] GetCurrentThreadId () returned 0x18c0
	[0089.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0089.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb64
	[0089.151] GetFileSizeEx (in: hFile=0xb64, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12715) returned 1
	[0089.151] CreateFileMappingA (hFile=0xb64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31b5, lpName=0x0) returned 0xb68
	[0089.151] MapViewOfFile (hFileMappingObject=0xb68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.154] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.154] CloseHandle (hObject=0xb68) returned 1
	[0089.154] GetCurrentThreadId () returned 0x18c0
	[0089.154] FlushFileBuffers (hFile=0xb64) returned 1
	[0089.156] CloseHandle (hObject=0xb64) returned 1
	[0089.156] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 126
	[0089.156] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0089.157] free (_Block=0x3287898) 
	[0089.157] RtlExitUserThread (Status=0x0) 

Thread:
	id = 531
	os_tid = 0x18c4

	[0089.158] _alloca_probe () returned 0x40328a
	[0089.158] GetCurrentThreadId () returned 0x18c4
	[0089.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0089.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb68
	[0089.159] GetFileSizeEx (in: hFile=0xb68, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3495) returned 1
	[0089.159] CreateFileMappingA (hFile=0xb68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdad, lpName=0x0) returned 0xb6c
	[0089.159] MapViewOfFile (hFileMappingObject=0xb6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.160] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.160] CloseHandle (hObject=0xb6c) returned 1
	[0089.160] GetCurrentThreadId () returned 0x18c4
	[0089.160] FlushFileBuffers (hFile=0xb68) returned 1
	[0089.165] CloseHandle (hObject=0xb68) returned 1
	[0089.165] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 126
	[0089.166] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0089.166] free (_Block=0x3285888) 
	[0089.166] RtlExitUserThread (Status=0x0) 

Thread:
	id = 532
	os_tid = 0x18c8

	[0089.167] _alloca_probe () returned 0x40328a
	[0089.167] GetCurrentThreadId () returned 0x18c8
	[0089.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0089.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb6c
	[0089.168] GetFileSizeEx (in: hFile=0xb6c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3143) returned 1
	[0089.168] CreateFileMappingA (hFile=0xb6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc4d, lpName=0x0) returned 0xb70
	[0089.168] MapViewOfFile (hFileMappingObject=0xb70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0089.169] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0089.169] CloseHandle (hObject=0xb70) returned 1
	[0089.169] GetCurrentThreadId () returned 0x18c8
	[0089.169] FlushFileBuffers (hFile=0xb6c) returned 1
	[0089.171] CloseHandle (hObject=0xb6c) returned 1
	[0089.171] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 126
	[0089.171] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0089.172] free (_Block=0x3286890) 
	[0089.172] RtlExitUserThread (Status=0x0) 

Thread:
	id = 533
	os_tid = 0x18cc

	[0089.173] _alloca_probe () returned 0x40328a
	[0089.173] GetCurrentThreadId () returned 0x18cc
	[0089.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0089.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb70
	[0089.174] GetFileSizeEx (in: hFile=0xb70, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12483) returned 1
	[0089.174] CreateFileMappingA (hFile=0xb70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30c5, lpName=0x0) returned 0xb74
	[0089.174] MapViewOfFile (hFileMappingObject=0xb74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.177] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.177] CloseHandle (hObject=0xb74) returned 1
	[0089.177] GetCurrentThreadId () returned 0x18cc
	[0089.177] FlushFileBuffers (hFile=0xb70) returned 1
	[0089.178] CloseHandle (hObject=0xb70) returned 1
	[0089.179] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 126
	[0089.179] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0089.179] free (_Block=0x32898a8) 
	[0089.179] RtlExitUserThread (Status=0x0) 

Thread:
	id = 534
	os_tid = 0x18d0

	[0089.181] _alloca_probe () returned 0x40328a
	[0089.181] GetCurrentThreadId () returned 0x18d0
	[0089.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0089.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb74
	[0089.182] GetFileSizeEx (in: hFile=0xb74, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5257) returned 1
	[0089.182] CreateFileMappingA (hFile=0xb74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xb78
	[0089.182] MapViewOfFile (hFileMappingObject=0xb78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.183] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.183] CloseHandle (hObject=0xb78) returned 1
	[0089.183] GetCurrentThreadId () returned 0x18d0
	[0089.183] FlushFileBuffers (hFile=0xb74) returned 1
	[0089.185] CloseHandle (hObject=0xb74) returned 1
	[0089.185] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 126
	[0089.185] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0089.186] free (_Block=0x32888a0) 
	[0089.186] RtlExitUserThread (Status=0x0) 

Thread:
	id = 535
	os_tid = 0x18d4

	[0089.187] _alloca_probe () returned 0x40328a
	[0089.188] GetCurrentThreadId () returned 0x18d4
	[0089.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0089.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb78
	[0089.188] GetFileSizeEx (in: hFile=0xb78, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2599) returned 1
	[0089.188] CreateFileMappingA (hFile=0xb78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa2d, lpName=0x0) returned 0xb7c
	[0089.188] MapViewOfFile (hFileMappingObject=0xb7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.189] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.189] CloseHandle (hObject=0xb7c) returned 1
	[0089.190] GetCurrentThreadId () returned 0x18d4
	[0089.190] FlushFileBuffers (hFile=0xb78) returned 1
	[0089.191] CloseHandle (hObject=0xb78) returned 1
	[0089.191] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 126
	[0089.191] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0089.192] free (_Block=0x3285888) 
	[0089.192] RtlExitUserThread (Status=0x0) 

Thread:
	id = 536
	os_tid = 0x18d8

	[0089.194] _alloca_probe () returned 0x40328a
	[0089.194] GetCurrentThreadId () returned 0x18d8
	[0089.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0089.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb7c
	[0089.194] GetFileSizeEx (in: hFile=0xb7c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=10621) returned 1
	[0089.195] CreateFileMappingA (hFile=0xb7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2989, lpName=0x0) returned 0xb80
	[0089.195] MapViewOfFile (hFileMappingObject=0xb80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.197] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.197] CloseHandle (hObject=0xb80) returned 1
	[0089.197] GetCurrentThreadId () returned 0x18d8
	[0089.197] FlushFileBuffers (hFile=0xb7c) returned 1
	[0089.199] CloseHandle (hObject=0xb7c) returned 1
	[0089.199] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 126
	[0089.199] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0089.202] free (_Block=0x3284880) 
	[0089.202] RtlExitUserThread (Status=0x0) 

Thread:
	id = 537
	os_tid = 0x18dc

	[0089.203] _alloca_probe () returned 0x40328a
	[0089.204] GetCurrentThreadId () returned 0x18dc
	[0089.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0089.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb80
	[0089.204] GetFileSizeEx (in: hFile=0xb80, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=15319) returned 1
	[0089.204] CreateFileMappingA (hFile=0xb80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bdd, lpName=0x0) returned 0xb84
	[0089.204] MapViewOfFile (hFileMappingObject=0xb84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.209] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.209] CloseHandle (hObject=0xb84) returned 1
	[0089.209] GetCurrentThreadId () returned 0x18dc
	[0089.209] FlushFileBuffers (hFile=0xb80) returned 1
	[0089.212] CloseHandle (hObject=0xb80) returned 1
	[0089.212] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 126
	[0089.212] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0089.213] free (_Block=0x3286890) 
	[0089.213] RtlExitUserThread (Status=0x0) 

Thread:
	id = 538
	os_tid = 0x18e0

	[0089.257] _alloca_probe () returned 0x40328a
	[0089.257] GetCurrentThreadId () returned 0x18e0
	[0089.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0089.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb84
	[0089.257] GetFileSizeEx (in: hFile=0xb84, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=5317) returned 1
	[0089.257] CreateFileMappingA (hFile=0xb84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14c9, lpName=0x0) returned 0xb88
	[0089.258] MapViewOfFile (hFileMappingObject=0xb88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0089.259] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0089.259] CloseHandle (hObject=0xb88) returned 1
	[0089.259] GetCurrentThreadId () returned 0x18e0
	[0089.259] FlushFileBuffers (hFile=0xb84) returned 1
	[0089.261] CloseHandle (hObject=0xb84) returned 1
	[0089.261] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 126
	[0089.261] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0089.262] free (_Block=0x3284880) 
	[0089.262] RtlExitUserThread (Status=0x0) 

Thread:
	id = 539
	os_tid = 0x18e4

	[0089.263] _alloca_probe () returned 0x40328a
	[0089.264] GetCurrentThreadId () returned 0x18e4
	[0089.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0089.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb88
	[0089.264] GetFileSizeEx (in: hFile=0xb88, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4965) returned 1
	[0089.264] CreateFileMappingA (hFile=0xb88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1369, lpName=0x0) returned 0xb8c
	[0089.264] MapViewOfFile (hFileMappingObject=0xb8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.266] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.266] CloseHandle (hObject=0xb8c) returned 1
	[0089.266] GetCurrentThreadId () returned 0x18e4
	[0089.266] FlushFileBuffers (hFile=0xb88) returned 1
	[0089.267] CloseHandle (hObject=0xb88) returned 1
	[0089.268] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 126
	[0089.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0089.268] free (_Block=0x3285888) 
	[0089.268] RtlExitUserThread (Status=0x0) 

Thread:
	id = 540
	os_tid = 0x18e8

	[0089.270] _alloca_probe () returned 0x40328a
	[0089.270] GetCurrentThreadId () returned 0x18e8
	[0089.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0089.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8c
	[0089.270] GetFileSizeEx (in: hFile=0xb8c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5035) returned 1
	[0089.270] CreateFileMappingA (hFile=0xb8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b5, lpName=0x0) returned 0xb90
	[0089.270] MapViewOfFile (hFileMappingObject=0xb90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.272] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.272] CloseHandle (hObject=0xb90) returned 1
	[0089.272] GetCurrentThreadId () returned 0x18e8
	[0089.272] FlushFileBuffers (hFile=0xb8c) returned 1
	[0089.274] CloseHandle (hObject=0xb8c) returned 1
	[0089.274] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 126
	[0089.274] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0089.275] free (_Block=0x32898a8) 
	[0089.275] RtlExitUserThread (Status=0x0) 

Thread:
	id = 541
	os_tid = 0x18ec

	[0089.276] _alloca_probe () returned 0x40328a
	[0089.276] GetCurrentThreadId () returned 0x18ec
	[0089.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0089.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb90
	[0089.277] GetFileSizeEx (in: hFile=0xb90, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1155) returned 1
	[0089.277] CreateFileMappingA (hFile=0xb90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x485, lpName=0x0) returned 0xb94
	[0089.277] MapViewOfFile (hFileMappingObject=0xb94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.278] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.278] CloseHandle (hObject=0xb94) returned 1
	[0089.278] GetCurrentThreadId () returned 0x18ec
	[0089.278] FlushFileBuffers (hFile=0xb90) returned 1
	[0089.279] CloseHandle (hObject=0xb90) returned 1
	[0089.280] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 126
	[0089.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0089.280] free (_Block=0x3284880) 
	[0089.280] RtlExitUserThread (Status=0x0) 

Thread:
	id = 542
	os_tid = 0x18f0

	[0089.282] _alloca_probe () returned 0x40328a
	[0089.282] GetCurrentThreadId () returned 0x18f0
	[0089.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0089.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb94
	[0089.282] GetFileSizeEx (in: hFile=0xb94, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7597) returned 1
	[0089.282] CreateFileMappingA (hFile=0xb94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1db9, lpName=0x0) returned 0xb98
	[0089.283] MapViewOfFile (hFileMappingObject=0xb98, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.284] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.285] CloseHandle (hObject=0xb98) returned 1
	[0089.285] GetCurrentThreadId () returned 0x18f0
	[0089.285] FlushFileBuffers (hFile=0xb94) returned 1
	[0089.286] CloseHandle (hObject=0xb94) returned 1
	[0089.287] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 126
	[0089.287] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0089.287] free (_Block=0x3285888) 
	[0089.287] RtlExitUserThread (Status=0x0) 

Thread:
	id = 543
	os_tid = 0x18f4

	[0089.334] _alloca_probe () returned 0x40328a
	[0089.335] GetCurrentThreadId () returned 0x18f4
	[0089.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0089.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb98
	[0089.335] GetFileSizeEx (in: hFile=0xb98, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=6991) returned 1
	[0089.335] CreateFileMappingA (hFile=0xb98, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b5d, lpName=0x0) returned 0xb9c
	[0089.335] MapViewOfFile (hFileMappingObject=0xb9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.337] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.337] CloseHandle (hObject=0xb9c) returned 1
	[0089.337] GetCurrentThreadId () returned 0x18f4
	[0089.337] FlushFileBuffers (hFile=0xb98) returned 1
	[0089.347] CloseHandle (hObject=0xb98) returned 1
	[0089.348] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 126
	[0089.348] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0089.349] free (_Block=0x32888a0) 
	[0089.349] RtlExitUserThread (Status=0x0) 

Thread:
	id = 544
	os_tid = 0x18f8

	[0089.342] _alloca_probe () returned 0x40328a
	[0089.343] GetCurrentThreadId () returned 0x18f8
	[0089.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0089.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba0
	[0089.343] GetFileSizeEx (in: hFile=0xba0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=13259) returned 1
	[0089.343] CreateFileMappingA (hFile=0xba0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33d5, lpName=0x0) returned 0xba4
	[0089.343] MapViewOfFile (hFileMappingObject=0xba4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.346] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.347] CloseHandle (hObject=0xba4) returned 1
	[0089.347] GetCurrentThreadId () returned 0x18f8
	[0089.347] FlushFileBuffers (hFile=0xba0) returned 1
	[0089.350] CloseHandle (hObject=0xba0) returned 1
	[0089.350] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 126
	[0089.350] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0089.351] free (_Block=0x3285888) 
	[0089.351] RtlExitUserThread (Status=0x0) 

Thread:
	id = 545
	os_tid = 0x18fc

	[0089.353] _alloca_probe () returned 0x40328a
	[0089.353] GetCurrentThreadId () returned 0x18fc
	[0089.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0089.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb98
	[0089.353] GetFileSizeEx (in: hFile=0xb98, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8587) returned 1
	[0089.353] CreateFileMappingA (hFile=0xb98, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2195, lpName=0x0) returned 0xba4
	[0089.353] MapViewOfFile (hFileMappingObject=0xba4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.356] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.356] CloseHandle (hObject=0xba4) returned 1
	[0089.356] GetCurrentThreadId () returned 0x18fc
	[0089.356] FlushFileBuffers (hFile=0xb98) returned 1
	[0089.357] CloseHandle (hObject=0xb98) returned 1
	[0089.358] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 126
	[0089.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0089.358] free (_Block=0x3287898) 
	[0089.358] RtlExitUserThread (Status=0x0) 

Thread:
	id = 546
	os_tid = 0x1900

	[0089.360] _alloca_probe () returned 0x40328a
	[0089.360] GetCurrentThreadId () returned 0x1900
	[0089.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0089.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba4
	[0089.360] GetFileSizeEx (in: hFile=0xba4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4907) returned 1
	[0089.360] CreateFileMappingA (hFile=0xba4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1335, lpName=0x0) returned 0xba8
	[0089.360] MapViewOfFile (hFileMappingObject=0xba8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.362] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.362] CloseHandle (hObject=0xba8) returned 1
	[0089.362] GetCurrentThreadId () returned 0x1900
	[0089.362] FlushFileBuffers (hFile=0xba4) returned 1
	[0089.364] CloseHandle (hObject=0xba4) returned 1
	[0089.364] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 126
	[0089.364] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0089.365] free (_Block=0x3284880) 
	[0089.365] RtlExitUserThread (Status=0x0) 

Thread:
	id = 547
	os_tid = 0x1904

	[0089.366] _alloca_probe () returned 0x40328a
	[0089.366] GetCurrentThreadId () returned 0x1904
	[0089.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0089.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba8
	[0089.367] GetFileSizeEx (in: hFile=0xba8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5389) returned 1
	[0089.367] CreateFileMappingA (hFile=0xba8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1519, lpName=0x0) returned 0xbac
	[0089.367] MapViewOfFile (hFileMappingObject=0xbac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.369] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.369] CloseHandle (hObject=0xbac) returned 1
	[0089.369] GetCurrentThreadId () returned 0x1904
	[0089.369] FlushFileBuffers (hFile=0xba8) returned 1
	[0089.370] CloseHandle (hObject=0xba8) returned 1
	[0089.371] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 126
	[0089.371] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0089.371] free (_Block=0x32888a0) 
	[0089.372] RtlExitUserThread (Status=0x0) 

Thread:
	id = 548
	os_tid = 0x1908

	[0089.373] _alloca_probe () returned 0x40328a
	[0089.373] GetCurrentThreadId () returned 0x1908
	[0089.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0089.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbac
	[0089.374] GetFileSizeEx (in: hFile=0xbac, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9248) returned 1
	[0089.374] CreateFileMappingA (hFile=0xbac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xbb0
	[0089.374] MapViewOfFile (hFileMappingObject=0xbb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.376] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.376] CloseHandle (hObject=0xbb0) returned 1
	[0089.376] GetCurrentThreadId () returned 0x1908
	[0089.376] FlushFileBuffers (hFile=0xbac) returned 1
	[0089.378] CloseHandle (hObject=0xbac) returned 1
	[0089.378] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 126
	[0089.378] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0089.378] free (_Block=0x3285888) 
	[0089.379] RtlExitUserThread (Status=0x0) 

Thread:
	id = 549
	os_tid = 0x190c

	[0089.380] _alloca_probe () returned 0x40328a
	[0089.380] GetCurrentThreadId () returned 0x190c
	[0089.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0089.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb0
	[0089.381] GetFileSizeEx (in: hFile=0xbb0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5023) returned 1
	[0089.381] CreateFileMappingA (hFile=0xbb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13ad, lpName=0x0) returned 0xbb4
	[0089.381] MapViewOfFile (hFileMappingObject=0xbb4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.429] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.429] CloseHandle (hObject=0xbb4) returned 1
	[0089.429] GetCurrentThreadId () returned 0x190c
	[0089.429] FlushFileBuffers (hFile=0xbb0) returned 1
	[0089.475] CloseHandle (hObject=0xbb0) returned 1
	[0089.475] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 126
	[0089.475] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0089.476] free (_Block=0x3287898) 
	[0089.476] RtlExitUserThread (Status=0x0) 

Thread:
	id = 550
	os_tid = 0x1910

	[0089.478] _alloca_probe () returned 0x40328a
	[0089.478] GetCurrentThreadId () returned 0x1910
	[0089.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0089.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb4
	[0089.478] GetFileSizeEx (in: hFile=0xbb4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4395) returned 1
	[0089.478] CreateFileMappingA (hFile=0xbb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1135, lpName=0x0) returned 0xbb8
	[0089.478] MapViewOfFile (hFileMappingObject=0xbb8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.480] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.480] CloseHandle (hObject=0xbb8) returned 1
	[0089.480] GetCurrentThreadId () returned 0x1910
	[0089.480] FlushFileBuffers (hFile=0xbb4) returned 1
	[0089.482] CloseHandle (hObject=0xbb4) returned 1
	[0089.482] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 126
	[0089.482] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0089.482] free (_Block=0x3284880) 
	[0089.483] RtlExitUserThread (Status=0x0) 

Thread:
	id = 551
	os_tid = 0x1914

	[0089.484] _alloca_probe () returned 0x40328a
	[0089.484] GetCurrentThreadId () returned 0x1914
	[0089.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0089.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb8
	[0089.485] GetFileSizeEx (in: hFile=0xbb8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3979) returned 1
	[0089.485] CreateFileMappingA (hFile=0xbb8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf95, lpName=0x0) returned 0xbbc
	[0089.485] MapViewOfFile (hFileMappingObject=0xbbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.486] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.486] CloseHandle (hObject=0xbbc) returned 1
	[0089.486] GetCurrentThreadId () returned 0x1914
	[0089.486] FlushFileBuffers (hFile=0xbb8) returned 1
	[0089.489] CloseHandle (hObject=0xbb8) returned 1
	[0089.489] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 126
	[0089.490] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0089.490] free (_Block=0x3285888) 
	[0089.490] RtlExitUserThread (Status=0x0) 

Thread:
	id = 552
	os_tid = 0x1918

	[0089.584] _alloca_probe () returned 0x40328a
	[0089.585] GetCurrentThreadId () returned 0x1918
	[0089.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0089.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbbc
	[0089.585] GetFileSizeEx (in: hFile=0xbbc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3379) returned 1
	[0089.585] CreateFileMappingA (hFile=0xbbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd35, lpName=0x0) returned 0xbc0
	[0089.585] MapViewOfFile (hFileMappingObject=0xbc0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.587] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.587] CloseHandle (hObject=0xbc0) returned 1
	[0089.587] GetCurrentThreadId () returned 0x1918
	[0089.587] FlushFileBuffers (hFile=0xbbc) returned 1
	[0089.588] CloseHandle (hObject=0xbbc) returned 1
	[0089.589] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 126
	[0089.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0089.589] free (_Block=0x32888a0) 
	[0089.589] RtlExitUserThread (Status=0x0) 

Thread:
	id = 553
	os_tid = 0x191c

	[0089.592] _alloca_probe () returned 0x40328a
	[0089.592] GetCurrentThreadId () returned 0x191c
	[0089.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0089.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc0
	[0089.593] GetFileSizeEx (in: hFile=0xbc0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3120) returned 1
	[0089.593] CreateFileMappingA (hFile=0xbc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xbc4
	[0089.593] MapViewOfFile (hFileMappingObject=0xbc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.594] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.594] CloseHandle (hObject=0xbc4) returned 1
	[0089.594] GetCurrentThreadId () returned 0x191c
	[0089.594] FlushFileBuffers (hFile=0xbc0) returned 1
	[0089.596] CloseHandle (hObject=0xbc0) returned 1
	[0089.596] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 126
	[0089.596] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0089.596] free (_Block=0x3284880) 
	[0089.596] RtlExitUserThread (Status=0x0) 

Thread:
	id = 554
	os_tid = 0x1920

	[0089.598] _alloca_probe () returned 0x40328a
	[0089.598] GetCurrentThreadId () returned 0x1920
	[0089.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0089.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc4
	[0089.599] GetFileSizeEx (in: hFile=0xbc4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=13525) returned 1
	[0089.599] CreateFileMappingA (hFile=0xbc4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34d9, lpName=0x0) returned 0xbc8
	[0089.599] MapViewOfFile (hFileMappingObject=0xbc8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.602] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.602] CloseHandle (hObject=0xbc8) returned 1
	[0089.602] GetCurrentThreadId () returned 0x1920
	[0089.602] FlushFileBuffers (hFile=0xbc4) returned 1
	[0089.604] CloseHandle (hObject=0xbc4) returned 1
	[0089.604] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 126
	[0089.604] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0089.605] free (_Block=0x3286890) 
	[0089.605] RtlExitUserThread (Status=0x0) 

Thread:
	id = 555
	os_tid = 0x1924

	[0089.606] _alloca_probe () returned 0x40328a
	[0089.607] GetCurrentThreadId () returned 0x1924
	[0089.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0089.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc8
	[0089.607] GetFileSizeEx (in: hFile=0xbc8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=20201) returned 1
	[0089.607] CreateFileMappingA (hFile=0xbc8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0xbcc
	[0089.607] MapViewOfFile (hFileMappingObject=0xbcc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.611] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.611] CloseHandle (hObject=0xbcc) returned 1
	[0089.611] GetCurrentThreadId () returned 0x1924
	[0089.611] FlushFileBuffers (hFile=0xbc8) returned 1
	[0089.613] CloseHandle (hObject=0xbc8) returned 1
	[0089.613] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 126
	[0089.613] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0089.614] free (_Block=0x32888a0) 
	[0089.614] RtlExitUserThread (Status=0x0) 

Thread:
	id = 556
	os_tid = 0x1928

	[0089.615] _alloca_probe () returned 0x40328a
	[0089.616] GetCurrentThreadId () returned 0x1928
	[0089.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0089.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbcc
	[0089.616] GetFileSizeEx (in: hFile=0xbcc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=20459) returned 1
	[0089.616] CreateFileMappingA (hFile=0xbcc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ff5, lpName=0x0) returned 0xbd0
	[0089.616] MapViewOfFile (hFileMappingObject=0xbd0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.620] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.620] CloseHandle (hObject=0xbd0) returned 1
	[0089.620] GetCurrentThreadId () returned 0x1928
	[0089.620] FlushFileBuffers (hFile=0xbcc) returned 1
	[0089.630] CloseHandle (hObject=0xbcc) returned 1
	[0089.630] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 126
	[0089.630] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0089.631] free (_Block=0x3284880) 
	[0089.631] RtlExitUserThread (Status=0x0) 

Thread:
	id = 557
	os_tid = 0x192c

	[0089.624] _alloca_probe () returned 0x40328a
	[0089.625] GetCurrentThreadId () returned 0x192c
	[0089.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0089.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbd4
	[0089.625] GetFileSizeEx (in: hFile=0xbd4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=15737) returned 1
	[0089.625] CreateFileMappingA (hFile=0xbd4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xbd8
	[0089.625] MapViewOfFile (hFileMappingObject=0xbd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.629] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.629] CloseHandle (hObject=0xbd8) returned 1
	[0089.629] GetCurrentThreadId () returned 0x192c
	[0089.629] FlushFileBuffers (hFile=0xbd4) returned 1
	[0089.632] CloseHandle (hObject=0xbd4) returned 1
	[0089.632] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 126
	[0089.633] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0089.633] free (_Block=0x32898a8) 
	[0089.633] RtlExitUserThread (Status=0x0) 

Thread:
	id = 558
	os_tid = 0x1930

	[0089.635] _alloca_probe () returned 0x40328a
	[0089.635] GetCurrentThreadId () returned 0x1930
	[0089.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0089.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbcc
	[0089.636] GetFileSizeEx (in: hFile=0xbcc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9024) returned 1
	[0089.636] CreateFileMappingA (hFile=0xbcc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xbd8
	[0089.636] MapViewOfFile (hFileMappingObject=0xbd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.638] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.638] CloseHandle (hObject=0xbd8) returned 1
	[0089.638] GetCurrentThreadId () returned 0x1930
	[0089.638] FlushFileBuffers (hFile=0xbcc) returned 1
	[0089.640] CloseHandle (hObject=0xbcc) returned 1
	[0089.640] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 155
	[0089.640] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0089.641] free (_Block=0x32888a0) 
	[0089.641] RtlExitUserThread (Status=0x0) 

Thread:
	id = 559
	os_tid = 0x1934

	[0089.642] _alloca_probe () returned 0x40328a
	[0089.642] GetCurrentThreadId () returned 0x1934
	[0089.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0089.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbd8
	[0089.643] GetFileSizeEx (in: hFile=0xbd8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7216) returned 1
	[0089.643] CreateFileMappingA (hFile=0xbd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xbdc
	[0089.643] MapViewOfFile (hFileMappingObject=0xbdc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.645] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.646] CloseHandle (hObject=0xbdc) returned 1
	[0089.646] GetCurrentThreadId () returned 0x1934
	[0089.646] FlushFileBuffers (hFile=0xbd8) returned 1
	[0089.647] CloseHandle (hObject=0xbd8) returned 1
	[0089.647] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 155
	[0089.647] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0089.648] free (_Block=0x3284880) 
	[0089.648] RtlExitUserThread (Status=0x0) 

Thread:
	id = 560
	os_tid = 0x1938

	[0089.650] _alloca_probe () returned 0x40328a
	[0089.650] GetCurrentThreadId () returned 0x1938
	[0089.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0089.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbdc
	[0089.650] GetFileSizeEx (in: hFile=0xbdc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=14881) returned 1
	[0089.650] CreateFileMappingA (hFile=0xbdc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xbe0
	[0089.650] MapViewOfFile (hFileMappingObject=0xbe0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.653] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.654] CloseHandle (hObject=0xbe0) returned 1
	[0089.654] GetCurrentThreadId () returned 0x1938
	[0089.654] FlushFileBuffers (hFile=0xbdc) returned 1
	[0089.655] CloseHandle (hObject=0xbdc) returned 1
	[0089.655] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 155
	[0089.656] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0089.658] free (_Block=0x3284880) 
	[0089.658] RtlExitUserThread (Status=0x0) 

Thread:
	id = 561
	os_tid = 0x193c

	[0089.660] _alloca_probe () returned 0x40328a
	[0089.660] GetCurrentThreadId () returned 0x193c
	[0089.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0089.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbe0
	[0089.660] GetFileSizeEx (in: hFile=0xbe0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=6701) returned 1
	[0089.660] CreateFileMappingA (hFile=0xbe0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a39, lpName=0x0) returned 0xbe4
	[0089.661] MapViewOfFile (hFileMappingObject=0xbe4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.662] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.663] CloseHandle (hObject=0xbe4) returned 1
	[0089.663] GetCurrentThreadId () returned 0x193c
	[0089.663] FlushFileBuffers (hFile=0xbe0) returned 1
	[0089.665] CloseHandle (hObject=0xbe0) returned 1
	[0089.665] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 155
	[0089.665] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0089.666] free (_Block=0x3284880) 
	[0089.666] RtlExitUserThread (Status=0x0) 

Thread:
	id = 562
	os_tid = 0x1940

	[0089.667] _alloca_probe () returned 0x40328a
	[0089.668] GetCurrentThreadId () returned 0x1940
	[0089.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0089.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbe4
	[0089.668] GetFileSizeEx (in: hFile=0xbe4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3257) returned 1
	[0089.668] CreateFileMappingA (hFile=0xbe4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0xbe8
	[0089.668] MapViewOfFile (hFileMappingObject=0xbe8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.669] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.669] CloseHandle (hObject=0xbe8) returned 1
	[0089.669] GetCurrentThreadId () returned 0x1940
	[0089.669] FlushFileBuffers (hFile=0xbe4) returned 1
	[0089.671] CloseHandle (hObject=0xbe4) returned 1
	[0089.671] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 155
	[0089.671] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0089.672] free (_Block=0x32898a8) 
	[0089.672] RtlExitUserThread (Status=0x0) 

Thread:
	id = 563
	os_tid = 0x1944

	[0089.673] _alloca_probe () returned 0x40328a
	[0089.674] GetCurrentThreadId () returned 0x1944
	[0089.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0089.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbe8
	[0089.674] GetFileSizeEx (in: hFile=0xbe8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8097) returned 1
	[0089.674] CreateFileMappingA (hFile=0xbe8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xbec
	[0089.674] MapViewOfFile (hFileMappingObject=0xbec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.676] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.676] CloseHandle (hObject=0xbec) returned 1
	[0089.676] GetCurrentThreadId () returned 0x1944
	[0089.676] FlushFileBuffers (hFile=0xbe8) returned 1
	[0089.678] CloseHandle (hObject=0xbe8) returned 1
	[0089.678] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 155
	[0089.678] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0089.678] free (_Block=0x3284880) 
	[0089.678] RtlExitUserThread (Status=0x0) 

Thread:
	id = 564
	os_tid = 0x1948

	[0089.680] _alloca_probe () returned 0x40328a
	[0089.680] GetCurrentThreadId () returned 0x1948
	[0089.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0089.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbec
	[0089.681] GetFileSizeEx (in: hFile=0xbec, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7701) returned 1
	[0089.681] CreateFileMappingA (hFile=0xbec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e19, lpName=0x0) returned 0xbf0
	[0089.681] MapViewOfFile (hFileMappingObject=0xbf0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.683] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.683] CloseHandle (hObject=0xbf0) returned 1
	[0089.683] GetCurrentThreadId () returned 0x1948
	[0089.683] FlushFileBuffers (hFile=0xbec) returned 1
	[0089.685] CloseHandle (hObject=0xbec) returned 1
	[0089.685] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 155
	[0089.685] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0089.685] free (_Block=0x32898a8) 
	[0089.685] RtlExitUserThread (Status=0x0) 

Thread:
	id = 565
	os_tid = 0x194c

	[0089.687] _alloca_probe () returned 0x40328a
	[0089.687] GetCurrentThreadId () returned 0x194c
	[0089.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0089.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbf0
	[0089.688] GetFileSizeEx (in: hFile=0xbf0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=11897) returned 1
	[0089.688] CreateFileMappingA (hFile=0xbf0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0xbf4
	[0089.688] MapViewOfFile (hFileMappingObject=0xbf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.690] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.690] CloseHandle (hObject=0xbf4) returned 1
	[0089.690] GetCurrentThreadId () returned 0x194c
	[0089.690] FlushFileBuffers (hFile=0xbf0) returned 1
	[0089.692] CloseHandle (hObject=0xbf0) returned 1
	[0089.692] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 155
	[0089.692] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0089.693] free (_Block=0x3284880) 
	[0089.693] RtlExitUserThread (Status=0x0) 

Thread:
	id = 566
	os_tid = 0x1950

	[0089.694] _alloca_probe () returned 0x40328a
	[0089.695] GetCurrentThreadId () returned 0x1950
	[0089.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0089.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbf4
	[0089.695] GetFileSizeEx (in: hFile=0xbf4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=529) returned 1
	[0089.695] CreateFileMappingA (hFile=0xbf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xbf8
	[0089.695] MapViewOfFile (hFileMappingObject=0xbf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.696] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.696] CloseHandle (hObject=0xbf8) returned 1
	[0089.696] GetCurrentThreadId () returned 0x1950
	[0089.696] FlushFileBuffers (hFile=0xbf4) returned 1
	[0089.699] CloseHandle (hObject=0xbf4) returned 1
	[0089.700] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 155
	[0089.700] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0089.700] free (_Block=0x3287898) 
	[0089.700] RtlExitUserThread (Status=0x0) 

Thread:
	id = 567
	os_tid = 0x1954

	[0089.702] _alloca_probe () returned 0x40328a
	[0089.702] GetCurrentThreadId () returned 0x1954
	[0089.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0089.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbf8
	[0089.703] GetFileSizeEx (in: hFile=0xbf8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=517) returned 1
	[0089.703] CreateFileMappingA (hFile=0xbf8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x209, lpName=0x0) returned 0xbfc
	[0089.703] MapViewOfFile (hFileMappingObject=0xbfc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.703] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.704] CloseHandle (hObject=0xbfc) returned 1
	[0089.704] GetCurrentThreadId () returned 0x1954
	[0089.704] FlushFileBuffers (hFile=0xbf8) returned 1
	[0089.710] CloseHandle (hObject=0xbf8) returned 1
	[0089.710] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 155
	[0089.710] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0089.711] free (_Block=0x3284880) 
	[0089.711] RtlExitUserThread (Status=0x0) 

Thread:
	id = 568
	os_tid = 0x1958

	[0089.708] _alloca_probe () returned 0x40328a
	[0089.709] GetCurrentThreadId () returned 0x1958
	[0089.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0089.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc04
	[0089.709] GetFileSizeEx (in: hFile=0xc04, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=12725) returned 1
	[0089.709] CreateFileMappingA (hFile=0xc04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31b9, lpName=0x0) returned 0xc08
	[0089.709] MapViewOfFile (hFileMappingObject=0xc08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.713] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.713] CloseHandle (hObject=0xc08) returned 1
	[0089.713] GetCurrentThreadId () returned 0x1958
	[0089.713] FlushFileBuffers (hFile=0xc04) returned 1
	[0089.715] CloseHandle (hObject=0xc04) returned 1
	[0089.715] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 155
	[0089.715] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0089.716] free (_Block=0x32888a0) 
	[0089.716] RtlExitUserThread (Status=0x0) 

Thread:
	id = 569
	os_tid = 0x195c

	[0089.717] _alloca_probe () returned 0x40328a
	[0089.718] GetCurrentThreadId () returned 0x195c
	[0089.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0089.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc08
	[0089.718] GetFileSizeEx (in: hFile=0xc08, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3501) returned 1
	[0089.718] CreateFileMappingA (hFile=0xc08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdb9, lpName=0x0) returned 0xbf8
	[0089.718] MapViewOfFile (hFileMappingObject=0xbf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.720] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.720] CloseHandle (hObject=0xbf8) returned 1
	[0089.720] GetCurrentThreadId () returned 0x195c
	[0089.720] FlushFileBuffers (hFile=0xc08) returned 1
	[0089.721] CloseHandle (hObject=0xc08) returned 1
	[0089.722] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 155
	[0089.722] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0089.722] free (_Block=0x3286890) 
	[0089.722] RtlExitUserThread (Status=0x0) 

Thread:
	id = 570
	os_tid = 0x1960

	[0089.724] _alloca_probe () returned 0x40328a
	[0089.724] GetCurrentThreadId () returned 0x1960
	[0089.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0089.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbf8
	[0089.725] GetFileSizeEx (in: hFile=0xbf8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3149) returned 1
	[0089.725] CreateFileMappingA (hFile=0xbf8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc59, lpName=0x0) returned 0xc0c
	[0089.725] MapViewOfFile (hFileMappingObject=0xc0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.726] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.726] CloseHandle (hObject=0xc0c) returned 1
	[0089.726] GetCurrentThreadId () returned 0x1960
	[0089.726] FlushFileBuffers (hFile=0xbf8) returned 1
	[0089.728] CloseHandle (hObject=0xbf8) returned 1
	[0089.728] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 155
	[0089.728] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0089.729] free (_Block=0x3286890) 
	[0089.729] RtlExitUserThread (Status=0x0) 

Thread:
	id = 571
	os_tid = 0x1964

	[0089.730] _alloca_probe () returned 0x40328a
	[0089.731] GetCurrentThreadId () returned 0x1964
	[0089.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0089.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0c
	[0089.731] GetFileSizeEx (in: hFile=0xc0c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12485) returned 1
	[0089.731] CreateFileMappingA (hFile=0xc0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30c9, lpName=0x0) returned 0xc10
	[0089.731] MapViewOfFile (hFileMappingObject=0xc10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.734] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.734] CloseHandle (hObject=0xc10) returned 1
	[0089.734] GetCurrentThreadId () returned 0x1964
	[0089.734] FlushFileBuffers (hFile=0xc0c) returned 1
	[0089.736] CloseHandle (hObject=0xc0c) returned 1
	[0089.736] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 155
	[0089.736] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0089.737] free (_Block=0x32888a0) 
	[0089.737] RtlExitUserThread (Status=0x0) 

Thread:
	id = 572
	os_tid = 0x1968

	[0089.739] _alloca_probe () returned 0x40328a
	[0089.739] GetCurrentThreadId () returned 0x1968
	[0089.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0089.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc10
	[0089.739] GetFileSizeEx (in: hFile=0xc10, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5265) returned 1
	[0089.740] CreateFileMappingA (hFile=0xc10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xc14
	[0089.740] MapViewOfFile (hFileMappingObject=0xc14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.741] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.741] CloseHandle (hObject=0xc14) returned 1
	[0089.741] GetCurrentThreadId () returned 0x1968
	[0089.741] FlushFileBuffers (hFile=0xc10) returned 1
	[0089.743] CloseHandle (hObject=0xc10) returned 1
	[0089.743] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 155
	[0089.743] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0089.744] free (_Block=0x3284880) 
	[0089.744] RtlExitUserThread (Status=0x0) 

Thread:
	id = 573
	os_tid = 0x196c

	[0089.745] _alloca_probe () returned 0x40328a
	[0089.746] GetCurrentThreadId () returned 0x196c
	[0089.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0089.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc14
	[0089.746] GetFileSizeEx (in: hFile=0xc14, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2605) returned 1
	[0089.746] CreateFileMappingA (hFile=0xc14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa39, lpName=0x0) returned 0xc18
	[0089.746] MapViewOfFile (hFileMappingObject=0xc18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.747] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.747] CloseHandle (hObject=0xc18) returned 1
	[0089.747] GetCurrentThreadId () returned 0x196c
	[0089.747] FlushFileBuffers (hFile=0xc14) returned 1
	[0089.751] CloseHandle (hObject=0xc14) returned 1
	[0089.751] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 155
	[0089.751] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0089.751] free (_Block=0x32888a0) 
	[0089.752] RtlExitUserThread (Status=0x0) 

Thread:
	id = 574
	os_tid = 0x1970

	[0089.753] _alloca_probe () returned 0x40328a
	[0089.754] GetCurrentThreadId () returned 0x1970
	[0089.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0089.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc18
	[0089.754] GetFileSizeEx (in: hFile=0xc18, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=10633) returned 1
	[0089.754] CreateFileMappingA (hFile=0xc18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0xc1c
	[0089.754] MapViewOfFile (hFileMappingObject=0xc1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0089.757] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0089.757] CloseHandle (hObject=0xc1c) returned 1
	[0089.757] GetCurrentThreadId () returned 0x1970
	[0089.757] FlushFileBuffers (hFile=0xc18) returned 1
	[0089.759] CloseHandle (hObject=0xc18) returned 1
	[0089.759] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 155
	[0089.759] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0089.760] free (_Block=0x3286890) 
	[0089.760] RtlExitUserThread (Status=0x0) 

Thread:
	id = 575
	os_tid = 0x1974

	[0089.761] _alloca_probe () returned 0x40328a
	[0089.762] GetCurrentThreadId () returned 0x1974
	[0089.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0089.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc1c
	[0089.762] GetFileSizeEx (in: hFile=0xc1c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=15325) returned 1
	[0089.762] CreateFileMappingA (hFile=0xc1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3be9, lpName=0x0) returned 0xc20
	[0089.762] MapViewOfFile (hFileMappingObject=0xc20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.765] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.766] CloseHandle (hObject=0xc20) returned 1
	[0089.766] GetCurrentThreadId () returned 0x1974
	[0089.766] FlushFileBuffers (hFile=0xc1c) returned 1
	[0089.768] CloseHandle (hObject=0xc1c) returned 1
	[0089.768] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 155
	[0089.768] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0089.769] free (_Block=0x3287898) 
	[0089.769] RtlExitUserThread (Status=0x0) 

Thread:
	id = 576
	os_tid = 0x1978

	[0089.770] _alloca_probe () returned 0x40328a
	[0089.771] GetCurrentThreadId () returned 0x1978
	[0089.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0089.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc20
	[0089.771] GetFileSizeEx (in: hFile=0xc20, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5321) returned 1
	[0089.771] CreateFileMappingA (hFile=0xc20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d1, lpName=0x0) returned 0xc24
	[0089.771] MapViewOfFile (hFileMappingObject=0xc24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.773] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.773] CloseHandle (hObject=0xc24) returned 1
	[0089.773] GetCurrentThreadId () returned 0x1978
	[0089.773] FlushFileBuffers (hFile=0xc20) returned 1
	[0089.775] CloseHandle (hObject=0xc20) returned 1
	[0089.775] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 155
	[0089.775] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0089.775] free (_Block=0x3284880) 
	[0089.775] RtlExitUserThread (Status=0x0) 

Thread:
	id = 577
	os_tid = 0x197c

	[0089.777] _alloca_probe () returned 0x40328a
	[0089.777] GetCurrentThreadId () returned 0x197c
	[0089.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0089.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc24
	[0089.778] GetFileSizeEx (in: hFile=0xc24, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4969) returned 1
	[0089.778] CreateFileMappingA (hFile=0xc24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1371, lpName=0x0) returned 0xc28
	[0089.778] MapViewOfFile (hFileMappingObject=0xc28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.779] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.779] CloseHandle (hObject=0xc28) returned 1
	[0089.780] GetCurrentThreadId () returned 0x197c
	[0089.780] FlushFileBuffers (hFile=0xc24) returned 1
	[0089.781] CloseHandle (hObject=0xc24) returned 1
	[0089.781] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 155
	[0089.781] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0089.782] free (_Block=0x3286890) 
	[0089.782] RtlExitUserThread (Status=0x0) 

Thread:
	id = 578
	os_tid = 0x1980

	[0089.783] _alloca_probe () returned 0x40328a
	[0089.784] GetCurrentThreadId () returned 0x1980
	[0089.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0089.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc28
	[0089.784] GetFileSizeEx (in: hFile=0xc28, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5045) returned 1
	[0089.784] CreateFileMappingA (hFile=0xc28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b9, lpName=0x0) returned 0xc2c
	[0089.784] MapViewOfFile (hFileMappingObject=0xc2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.786] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.786] CloseHandle (hObject=0xc2c) returned 1
	[0089.786] GetCurrentThreadId () returned 0x1980
	[0089.786] FlushFileBuffers (hFile=0xc28) returned 1
	[0089.788] CloseHandle (hObject=0xc28) returned 1
	[0089.788] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 155
	[0089.788] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0089.788] free (_Block=0x3284880) 
	[0089.788] RtlExitUserThread (Status=0x0) 

Thread:
	id = 579
	os_tid = 0x1984

	[0089.790] _alloca_probe () returned 0x40328a
	[0089.790] GetCurrentThreadId () returned 0x1984
	[0089.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0089.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc2c
	[0089.791] GetFileSizeEx (in: hFile=0xc2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1157) returned 1
	[0089.791] CreateFileMappingA (hFile=0xc2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x489, lpName=0x0) returned 0xc30
	[0089.791] MapViewOfFile (hFileMappingObject=0xc30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.792] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.792] CloseHandle (hObject=0xc30) returned 1
	[0089.792] GetCurrentThreadId () returned 0x1984
	[0089.792] FlushFileBuffers (hFile=0xc2c) returned 1
	[0089.801] CloseHandle (hObject=0xc2c) returned 1
	[0089.802] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 155
	[0089.802] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0089.802] free (_Block=0x3284880) 
	[0089.802] RtlExitUserThread (Status=0x0) 

Thread:
	id = 580
	os_tid = 0x1988

	[0089.850] _alloca_probe () returned 0x40328a
	[0089.851] GetCurrentThreadId () returned 0x1988
	[0089.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0089.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc30
	[0089.851] GetFileSizeEx (in: hFile=0xc30, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=7609) returned 1
	[0089.851] CreateFileMappingA (hFile=0xc30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dc1, lpName=0x0) returned 0xc34
	[0089.851] MapViewOfFile (hFileMappingObject=0xc34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0089.853] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0089.853] CloseHandle (hObject=0xc34) returned 1
	[0089.853] GetCurrentThreadId () returned 0x1988
	[0089.853] FlushFileBuffers (hFile=0xc30) returned 1
	[0089.855] CloseHandle (hObject=0xc30) returned 1
	[0089.855] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 155
	[0089.855] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0089.856] free (_Block=0x32888a0) 
	[0089.856] RtlExitUserThread (Status=0x0) 

Thread:
	id = 581
	os_tid = 0x198c

	[0089.857] _alloca_probe () returned 0x40328a
	[0089.858] GetCurrentThreadId () returned 0x198c
	[0089.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0089.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc34
	[0089.858] GetFileSizeEx (in: hFile=0xc34, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7005) returned 1
	[0089.858] CreateFileMappingA (hFile=0xc34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b69, lpName=0x0) returned 0xc38
	[0089.858] MapViewOfFile (hFileMappingObject=0xc38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.860] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.860] CloseHandle (hObject=0xc38) returned 1
	[0089.860] GetCurrentThreadId () returned 0x198c
	[0089.860] FlushFileBuffers (hFile=0xc34) returned 1
	[0089.862] CloseHandle (hObject=0xc34) returned 1
	[0089.862] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 155
	[0089.862] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0089.863] free (_Block=0x3284880) 
	[0089.863] RtlExitUserThread (Status=0x0) 

Thread:
	id = 582
	os_tid = 0x1990

	[0089.864] _alloca_probe () returned 0x40328a
	[0089.865] GetCurrentThreadId () returned 0x1990
	[0089.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0089.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc38
	[0089.865] GetFileSizeEx (in: hFile=0xc38, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=13269) returned 1
	[0089.865] CreateFileMappingA (hFile=0xc38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33d9, lpName=0x0) returned 0xc3c
	[0089.865] MapViewOfFile (hFileMappingObject=0xc3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.869] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.869] CloseHandle (hObject=0xc3c) returned 1
	[0089.869] GetCurrentThreadId () returned 0x1990
	[0089.869] FlushFileBuffers (hFile=0xc38) returned 1
	[0089.871] CloseHandle (hObject=0xc38) returned 1
	[0089.871] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 155
	[0089.871] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0089.872] free (_Block=0x32898a8) 
	[0089.872] RtlExitUserThread (Status=0x0) 

Thread:
	id = 583
	os_tid = 0x1994

	[0089.873] _alloca_probe () returned 0x40328a
	[0089.874] GetCurrentThreadId () returned 0x1994
	[0089.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0089.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc3c
	[0089.874] GetFileSizeEx (in: hFile=0xc3c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8597) returned 1
	[0089.874] CreateFileMappingA (hFile=0xc3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2199, lpName=0x0) returned 0xc40
	[0089.874] MapViewOfFile (hFileMappingObject=0xc40, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.876] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.876] CloseHandle (hObject=0xc40) returned 1
	[0089.876] GetCurrentThreadId () returned 0x1994
	[0089.876] FlushFileBuffers (hFile=0xc3c) returned 1
	[0089.878] CloseHandle (hObject=0xc3c) returned 1
	[0089.878] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 155
	[0089.878] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0089.881] free (_Block=0x32898a8) 
	[0089.881] RtlExitUserThread (Status=0x0) 

Thread:
	id = 584
	os_tid = 0x1998

	[0089.882] _alloca_probe () returned 0x40328a
	[0089.883] GetCurrentThreadId () returned 0x1998
	[0089.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0089.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc40
	[0089.883] GetFileSizeEx (in: hFile=0xc40, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4917) returned 1
	[0089.883] CreateFileMappingA (hFile=0xc40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1339, lpName=0x0) returned 0xc44
	[0089.883] MapViewOfFile (hFileMappingObject=0xc44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.885] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.885] CloseHandle (hObject=0xc44) returned 1
	[0089.885] GetCurrentThreadId () returned 0x1998
	[0089.885] FlushFileBuffers (hFile=0xc40) returned 1
	[0089.887] CloseHandle (hObject=0xc40) returned 1
	[0089.888] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 155
	[0089.888] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0089.888] free (_Block=0x3285888) 
	[0089.888] RtlExitUserThread (Status=0x0) 

Thread:
	id = 585
	os_tid = 0x199c

	[0089.889] _alloca_probe () returned 0x40328a
	[0089.890] GetCurrentThreadId () returned 0x199c
	[0089.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0089.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc44
	[0089.890] GetFileSizeEx (in: hFile=0xc44, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5401) returned 1
	[0089.890] CreateFileMappingA (hFile=0xc44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1521, lpName=0x0) returned 0xc48
	[0089.890] MapViewOfFile (hFileMappingObject=0xc48, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.892] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.892] CloseHandle (hObject=0xc48) returned 1
	[0089.892] GetCurrentThreadId () returned 0x199c
	[0089.892] FlushFileBuffers (hFile=0xc44) returned 1
	[0089.894] CloseHandle (hObject=0xc44) returned 1
	[0089.894] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 155
	[0089.894] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0089.895] free (_Block=0x32888a0) 
	[0089.895] RtlExitUserThread (Status=0x0) 

Thread:
	id = 586
	os_tid = 0x19a0

	[0089.896] _alloca_probe () returned 0x40328a
	[0089.896] GetCurrentThreadId () returned 0x19a0
	[0089.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0089.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc48
	[0089.897] GetFileSizeEx (in: hFile=0xc48, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=9248) returned 1
	[0089.897] CreateFileMappingA (hFile=0xc48, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xc4c
	[0089.897] MapViewOfFile (hFileMappingObject=0xc4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.899] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.899] CloseHandle (hObject=0xc4c) returned 1
	[0089.899] GetCurrentThreadId () returned 0x19a0
	[0089.899] FlushFileBuffers (hFile=0xc48) returned 1
	[0089.901] CloseHandle (hObject=0xc48) returned 1
	[0089.901] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 155
	[0089.901] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0089.902] free (_Block=0x3284880) 
	[0089.902] RtlExitUserThread (Status=0x0) 

Thread:
	id = 587
	os_tid = 0x19a4

	[0089.903] _alloca_probe () returned 0x40328a
	[0089.904] GetCurrentThreadId () returned 0x19a4
	[0089.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0089.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4c
	[0089.904] GetFileSizeEx (in: hFile=0xc4c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5037) returned 1
	[0089.904] CreateFileMappingA (hFile=0xc4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b9, lpName=0x0) returned 0xc50
	[0089.904] MapViewOfFile (hFileMappingObject=0xc50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.906] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.906] CloseHandle (hObject=0xc50) returned 1
	[0089.906] GetCurrentThreadId () returned 0x19a4
	[0089.906] FlushFileBuffers (hFile=0xc4c) returned 1
	[0089.908] CloseHandle (hObject=0xc4c) returned 1
	[0089.908] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 155
	[0089.908] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0089.909] free (_Block=0x32898a8) 
	[0089.909] RtlExitUserThread (Status=0x0) 

Thread:
	id = 588
	os_tid = 0x19a8

	[0089.910] _alloca_probe () returned 0x40328a
	[0089.910] GetCurrentThreadId () returned 0x19a8
	[0089.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0089.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc50
	[0089.911] GetFileSizeEx (in: hFile=0xc50, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=4405) returned 1
	[0089.911] CreateFileMappingA (hFile=0xc50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1139, lpName=0x0) returned 0xc54
	[0089.911] MapViewOfFile (hFileMappingObject=0xc54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.912] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.912] CloseHandle (hObject=0xc54) returned 1
	[0089.912] GetCurrentThreadId () returned 0x19a8
	[0089.912] FlushFileBuffers (hFile=0xc50) returned 1
	[0089.914] CloseHandle (hObject=0xc50) returned 1
	[0089.915] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 155
	[0089.915] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0089.915] free (_Block=0x3287898) 
	[0089.915] RtlExitUserThread (Status=0x0) 

Thread:
	id = 589
	os_tid = 0x19ac

	[0089.917] _alloca_probe () returned 0x40328a
	[0089.917] GetCurrentThreadId () returned 0x19ac
	[0089.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0089.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc54
	[0089.917] GetFileSizeEx (in: hFile=0xc54, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3989) returned 1
	[0089.917] CreateFileMappingA (hFile=0xc54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf99, lpName=0x0) returned 0xc58
	[0089.917] MapViewOfFile (hFileMappingObject=0xc58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0089.919] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0089.919] CloseHandle (hObject=0xc58) returned 1
	[0089.919] GetCurrentThreadId () returned 0x19ac
	[0089.919] FlushFileBuffers (hFile=0xc54) returned 1
	[0089.924] CloseHandle (hObject=0xc54) returned 1
	[0089.925] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 155
	[0089.925] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0089.925] free (_Block=0x3285888) 
	[0089.925] RtlExitUserThread (Status=0x0) 

Thread:
	id = 590
	os_tid = 0x19b0

	[0089.926] _alloca_probe () returned 0x40328a
	[0089.926] GetCurrentThreadId () returned 0x19b0
	[0089.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0089.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc58
	[0089.927] GetFileSizeEx (in: hFile=0xc58, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3381) returned 1
	[0089.927] CreateFileMappingA (hFile=0xc58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd39, lpName=0x0) returned 0xc5c
	[0089.927] MapViewOfFile (hFileMappingObject=0xc5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0090.127] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0090.127] CloseHandle (hObject=0xc5c) returned 1
	[0090.127] GetCurrentThreadId () returned 0x19b0
	[0090.127] FlushFileBuffers (hFile=0xc58) returned 1
	[0090.128] CloseHandle (hObject=0xc58) returned 1
	[0090.129] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 155
	[0090.129] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0090.130] free (_Block=0x3284880) 
	[0090.130] RtlExitUserThread (Status=0x0) 

Thread:
	id = 591
	os_tid = 0x19b4

	[0090.131] _alloca_probe () returned 0x40328a
	[0090.132] GetCurrentThreadId () returned 0x19b4
	[0090.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0090.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc5c
	[0090.132] GetFileSizeEx (in: hFile=0xc5c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3120) returned 1
	[0090.132] CreateFileMappingA (hFile=0xc5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xc60
	[0090.132] MapViewOfFile (hFileMappingObject=0xc60, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.133] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.133] CloseHandle (hObject=0xc60) returned 1
	[0090.133] GetCurrentThreadId () returned 0x19b4
	[0090.133] FlushFileBuffers (hFile=0xc5c) returned 1
	[0090.135] CloseHandle (hObject=0xc5c) returned 1
	[0090.135] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 155
	[0090.135] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0090.136] free (_Block=0x3284880) 
	[0090.136] RtlExitUserThread (Status=0x0) 

Thread:
	id = 592
	os_tid = 0x19b8

	[0090.137] _alloca_probe () returned 0x40328a
	[0090.138] GetCurrentThreadId () returned 0x19b8
	[0090.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0090.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc60
	[0090.138] GetFileSizeEx (in: hFile=0xc60, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=13529) returned 1
	[0090.138] CreateFileMappingA (hFile=0xc60, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34e1, lpName=0x0) returned 0xc64
	[0090.138] MapViewOfFile (hFileMappingObject=0xc64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.141] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.141] CloseHandle (hObject=0xc64) returned 1
	[0090.141] GetCurrentThreadId () returned 0x19b8
	[0090.141] FlushFileBuffers (hFile=0xc60) returned 1
	[0090.143] CloseHandle (hObject=0xc60) returned 1
	[0090.143] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 155
	[0090.143] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0090.144] free (_Block=0x3284880) 
	[0090.144] RtlExitUserThread (Status=0x0) 

Thread:
	id = 593
	os_tid = 0x19bc

	[0090.145] _alloca_probe () returned 0x40328a
	[0090.146] GetCurrentThreadId () returned 0x19bc
	[0090.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0090.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc64
	[0090.146] GetFileSizeEx (in: hFile=0xc64, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=20209) returned 1
	[0090.146] CreateFileMappingA (hFile=0xc64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0xc68
	[0090.146] MapViewOfFile (hFileMappingObject=0xc68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.196] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.196] CloseHandle (hObject=0xc68) returned 1
	[0090.196] GetCurrentThreadId () returned 0x19bc
	[0090.196] FlushFileBuffers (hFile=0xc64) returned 1
	[0090.198] CloseHandle (hObject=0xc64) returned 1
	[0090.198] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 155
	[0090.198] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0090.199] free (_Block=0x3284880) 
	[0090.199] RtlExitUserThread (Status=0x0) 

Thread:
	id = 594
	os_tid = 0x19c0

	[0090.200] _alloca_probe () returned 0x40328a
	[0090.201] GetCurrentThreadId () returned 0x19c0
	[0090.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0090.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc68
	[0090.201] GetFileSizeEx (in: hFile=0xc68, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=20469) returned 1
	[0090.201] CreateFileMappingA (hFile=0xc68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ff9, lpName=0x0) returned 0xc6c
	[0090.201] MapViewOfFile (hFileMappingObject=0xc6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.205] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.206] CloseHandle (hObject=0xc6c) returned 1
	[0090.206] GetCurrentThreadId () returned 0x19c0
	[0090.206] FlushFileBuffers (hFile=0xc68) returned 1
	[0090.207] CloseHandle (hObject=0xc68) returned 1
	[0090.207] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 155
	[0090.207] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0090.208] free (_Block=0x32898a8) 
	[0090.208] RtlExitUserThread (Status=0x0) 

Thread:
	id = 595
	os_tid = 0x19c4

	[0090.210] _alloca_probe () returned 0x40328a
	[0090.210] GetCurrentThreadId () returned 0x19c4
	[0090.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0090.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc6c
	[0090.211] GetFileSizeEx (in: hFile=0xc6c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=15745) returned 1
	[0090.211] CreateFileMappingA (hFile=0xc6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xc70
	[0090.211] MapViewOfFile (hFileMappingObject=0xc70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.214] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.214] CloseHandle (hObject=0xc70) returned 1
	[0090.214] GetCurrentThreadId () returned 0x19c4
	[0090.214] FlushFileBuffers (hFile=0xc6c) returned 1
	[0090.217] CloseHandle (hObject=0xc6c) returned 1
	[0090.217] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 155
	[0090.217] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0090.218] free (_Block=0x3285888) 
	[0090.218] RtlExitUserThread (Status=0x0) 

Thread:
	id = 596
	os_tid = 0x19c8

	[0090.219] _alloca_probe () returned 0x40328a
	[0090.219] GetCurrentThreadId () returned 0x19c8
	[0090.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0090.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc70
	[0090.219] GetFileSizeEx (in: hFile=0xc70, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=9024) returned 1
	[0090.219] CreateFileMappingA (hFile=0xc70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xc74
	[0090.220] MapViewOfFile (hFileMappingObject=0xc74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0090.221] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0090.222] CloseHandle (hObject=0xc74) returned 1
	[0090.222] GetCurrentThreadId () returned 0x19c8
	[0090.222] FlushFileBuffers (hFile=0xc70) returned 1
	[0090.223] CloseHandle (hObject=0xc70) returned 1
	[0090.224] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 184
	[0090.224] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0090.224] free (_Block=0x32898a8) 
	[0090.224] RtlExitUserThread (Status=0x0) 

Thread:
	id = 597
	os_tid = 0x19cc

	[0090.226] _alloca_probe () returned 0x40328a
	[0090.226] GetCurrentThreadId () returned 0x19cc
	[0090.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0090.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc74
	[0090.227] GetFileSizeEx (in: hFile=0xc74, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7216) returned 1
	[0090.227] CreateFileMappingA (hFile=0xc74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xc78
	[0090.227] MapViewOfFile (hFileMappingObject=0xc78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.229] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.229] CloseHandle (hObject=0xc78) returned 1
	[0090.229] GetCurrentThreadId () returned 0x19cc
	[0090.229] FlushFileBuffers (hFile=0xc74) returned 1
	[0090.231] CloseHandle (hObject=0xc74) returned 1
	[0090.231] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 184
	[0090.231] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0090.232] free (_Block=0x3286890) 
	[0090.232] RtlExitUserThread (Status=0x0) 

Thread:
	id = 598
	os_tid = 0x19d0

	[0090.233] _alloca_probe () returned 0x40328a
	[0090.234] GetCurrentThreadId () returned 0x19d0
	[0090.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0090.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc78
	[0090.234] GetFileSizeEx (in: hFile=0xc78, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=14881) returned 1
	[0090.234] CreateFileMappingA (hFile=0xc78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xc7c
	[0090.234] MapViewOfFile (hFileMappingObject=0xc7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.237] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.237] CloseHandle (hObject=0xc7c) returned 1
	[0090.237] GetCurrentThreadId () returned 0x19d0
	[0090.237] FlushFileBuffers (hFile=0xc78) returned 1
	[0090.239] CloseHandle (hObject=0xc78) returned 1
	[0090.239] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 184
	[0090.239] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0090.240] free (_Block=0x32898a8) 
	[0090.240] RtlExitUserThread (Status=0x0) 

Thread:
	id = 599
	os_tid = 0x19d4

	[0090.242] _alloca_probe () returned 0x40328a
	[0090.242] GetCurrentThreadId () returned 0x19d4
	[0090.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0090.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc7c
	[0090.243] GetFileSizeEx (in: hFile=0xc7c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=6713) returned 1
	[0090.243] CreateFileMappingA (hFile=0xc7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a41, lpName=0x0) returned 0xc80
	[0090.243] MapViewOfFile (hFileMappingObject=0xc80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.245] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.245] CloseHandle (hObject=0xc80) returned 1
	[0090.245] GetCurrentThreadId () returned 0x19d4
	[0090.245] FlushFileBuffers (hFile=0xc7c) returned 1
	[0090.246] CloseHandle (hObject=0xc7c) returned 1
	[0090.247] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 184
	[0090.247] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0090.247] free (_Block=0x3284880) 
	[0090.247] RtlExitUserThread (Status=0x0) 

Thread:
	id = 600
	os_tid = 0x19d8

	[0090.249] _alloca_probe () returned 0x40328a
	[0090.249] GetCurrentThreadId () returned 0x19d8
	[0090.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0090.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc80
	[0090.250] GetFileSizeEx (in: hFile=0xc80, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3265) returned 1
	[0090.250] CreateFileMappingA (hFile=0xc80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0xc84
	[0090.250] MapViewOfFile (hFileMappingObject=0xc84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.251] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.251] CloseHandle (hObject=0xc84) returned 1
	[0090.251] GetCurrentThreadId () returned 0x19d8
	[0090.251] FlushFileBuffers (hFile=0xc80) returned 1
	[0090.253] CloseHandle (hObject=0xc80) returned 1
	[0090.253] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 184
	[0090.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0090.254] free (_Block=0x3287898) 
	[0090.254] RtlExitUserThread (Status=0x0) 

Thread:
	id = 601
	os_tid = 0x19dc

	[0090.255] _alloca_probe () returned 0x40328a
	[0090.256] GetCurrentThreadId () returned 0x19dc
	[0090.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0090.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc84
	[0090.256] GetFileSizeEx (in: hFile=0xc84, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8097) returned 1
	[0090.256] CreateFileMappingA (hFile=0xc84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xc88
	[0090.256] MapViewOfFile (hFileMappingObject=0xc88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.258] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.258] CloseHandle (hObject=0xc88) returned 1
	[0090.258] GetCurrentThreadId () returned 0x19dc
	[0090.258] FlushFileBuffers (hFile=0xc84) returned 1
	[0090.260] CloseHandle (hObject=0xc84) returned 1
	[0090.260] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 184
	[0090.260] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0090.261] free (_Block=0x32888a0) 
	[0090.261] RtlExitUserThread (Status=0x0) 

Thread:
	id = 602
	os_tid = 0x19e0

	[0090.262] _alloca_probe () returned 0x40328a
	[0090.263] GetCurrentThreadId () returned 0x19e0
	[0090.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0090.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc88
	[0090.263] GetFileSizeEx (in: hFile=0xc88, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=7705) returned 1
	[0090.263] CreateFileMappingA (hFile=0xc88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e21, lpName=0x0) returned 0xc8c
	[0090.263] MapViewOfFile (hFileMappingObject=0xc8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.265] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.265] CloseHandle (hObject=0xc8c) returned 1
	[0090.265] GetCurrentThreadId () returned 0x19e0
	[0090.265] FlushFileBuffers (hFile=0xc88) returned 1
	[0090.269] CloseHandle (hObject=0xc88) returned 1
	[0090.270] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 184
	[0090.270] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0090.270] free (_Block=0x3284880) 
	[0090.270] RtlExitUserThread (Status=0x0) 

Thread:
	id = 603
	os_tid = 0x19e4

	[0090.271] _alloca_probe () returned 0x40328a
	[0090.272] GetCurrentThreadId () returned 0x19e4
	[0090.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0090.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc88
	[0090.272] GetFileSizeEx (in: hFile=0xc88, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=11905) returned 1
	[0090.272] CreateFileMappingA (hFile=0xc88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0xc90
	[0090.272] MapViewOfFile (hFileMappingObject=0xc90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0090.275] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0090.275] CloseHandle (hObject=0xc90) returned 1
	[0090.275] GetCurrentThreadId () returned 0x19e4
	[0090.275] FlushFileBuffers (hFile=0xc88) returned 1
	[0090.277] CloseHandle (hObject=0xc88) returned 1
	[0090.277] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 184
	[0090.277] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0090.277] free (_Block=0x32888a0) 
	[0090.277] RtlExitUserThread (Status=0x0) 

Thread:
	id = 604
	os_tid = 0x19e8

	[0090.279] _alloca_probe () returned 0x40328a
	[0090.279] GetCurrentThreadId () returned 0x19e8
	[0090.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0090.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc90
	[0090.280] GetFileSizeEx (in: hFile=0xc90, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=529) returned 1
	[0090.280] CreateFileMappingA (hFile=0xc90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xc94
	[0090.280] MapViewOfFile (hFileMappingObject=0xc94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.280] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.280] CloseHandle (hObject=0xc94) returned 1
	[0090.281] GetCurrentThreadId () returned 0x19e8
	[0090.281] FlushFileBuffers (hFile=0xc90) returned 1
	[0090.282] CloseHandle (hObject=0xc90) returned 1
	[0090.282] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 184
	[0090.282] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0090.283] free (_Block=0x3284880) 
	[0090.283] RtlExitUserThread (Status=0x0) 

Thread:
	id = 605
	os_tid = 0x19ec

	[0090.284] _alloca_probe () returned 0x40328a
	[0090.285] GetCurrentThreadId () returned 0x19ec
	[0090.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0090.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc94
	[0090.285] GetFileSizeEx (in: hFile=0xc94, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=521) returned 1
	[0090.285] CreateFileMappingA (hFile=0xc94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xc98
	[0090.285] MapViewOfFile (hFileMappingObject=0xc98, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.286] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.286] CloseHandle (hObject=0xc98) returned 1
	[0090.286] GetCurrentThreadId () returned 0x19ec
	[0090.286] FlushFileBuffers (hFile=0xc94) returned 1
	[0090.288] CloseHandle (hObject=0xc94) returned 1
	[0090.288] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 184
	[0090.288] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0090.289] free (_Block=0x3284880) 
	[0090.289] RtlExitUserThread (Status=0x0) 

Thread:
	id = 606
	os_tid = 0x19f0

	[0090.290] _alloca_probe () returned 0x40328a
	[0090.291] GetCurrentThreadId () returned 0x19f0
	[0090.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0090.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc98
	[0090.291] GetFileSizeEx (in: hFile=0xc98, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12729) returned 1
	[0090.291] CreateFileMappingA (hFile=0xc98, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31c1, lpName=0x0) returned 0xc9c
	[0090.291] MapViewOfFile (hFileMappingObject=0xc9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.296] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.296] CloseHandle (hObject=0xc9c) returned 1
	[0090.296] GetCurrentThreadId () returned 0x19f0
	[0090.297] FlushFileBuffers (hFile=0xc98) returned 1
	[0090.298] CloseHandle (hObject=0xc98) returned 1
	[0090.298] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 184
	[0090.298] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0090.310] free (_Block=0x3284880) 
	[0090.310] RtlExitUserThread (Status=0x0) 

Thread:
	id = 607
	os_tid = 0x19f4

	[0090.311] _alloca_probe () returned 0x40328a
	[0090.311] GetCurrentThreadId () returned 0x19f4
	[0090.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0090.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc9c
	[0090.312] GetFileSizeEx (in: hFile=0xc9c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3513) returned 1
	[0090.312] CreateFileMappingA (hFile=0xc9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc1, lpName=0x0) returned 0xca0
	[0090.312] MapViewOfFile (hFileMappingObject=0xca0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.313] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.313] CloseHandle (hObject=0xca0) returned 1
	[0090.313] GetCurrentThreadId () returned 0x19f4
	[0090.313] FlushFileBuffers (hFile=0xc9c) returned 1
	[0090.315] CloseHandle (hObject=0xc9c) returned 1
	[0090.316] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 184
	[0090.316] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0090.316] free (_Block=0x3285888) 
	[0090.316] RtlExitUserThread (Status=0x0) 

Thread:
	id = 608
	os_tid = 0x19f8

	[0090.318] _alloca_probe () returned 0x40328a
	[0090.318] GetCurrentThreadId () returned 0x19f8
	[0090.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0090.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xca0
	[0090.318] GetFileSizeEx (in: hFile=0xca0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3161) returned 1
	[0090.318] CreateFileMappingA (hFile=0xca0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc61, lpName=0x0) returned 0xca4
	[0090.319] MapViewOfFile (hFileMappingObject=0xca4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.320] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.320] CloseHandle (hObject=0xca4) returned 1
	[0090.320] GetCurrentThreadId () returned 0x19f8
	[0090.320] FlushFileBuffers (hFile=0xca0) returned 1
	[0090.322] CloseHandle (hObject=0xca0) returned 1
	[0090.322] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 184
	[0090.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0090.323] free (_Block=0x3284880) 
	[0090.323] RtlExitUserThread (Status=0x0) 

Thread:
	id = 609
	os_tid = 0x19fc

	[0090.324] _alloca_probe () returned 0x40328a
	[0090.325] GetCurrentThreadId () returned 0x19fc
	[0090.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0090.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xca4
	[0090.325] GetFileSizeEx (in: hFile=0xca4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12489) returned 1
	[0090.325] CreateFileMappingA (hFile=0xca4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30d1, lpName=0x0) returned 0xca8
	[0090.325] MapViewOfFile (hFileMappingObject=0xca8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.328] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.328] CloseHandle (hObject=0xca8) returned 1
	[0090.328] GetCurrentThreadId () returned 0x19fc
	[0090.328] FlushFileBuffers (hFile=0xca4) returned 1
	[0090.330] CloseHandle (hObject=0xca4) returned 1
	[0090.330] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 184
	[0090.330] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0090.331] free (_Block=0x3284880) 
	[0090.331] RtlExitUserThread (Status=0x0) 

Thread:
	id = 610
	os_tid = 0x1a00

	[0090.332] _alloca_probe () returned 0x40328a
	[0090.332] GetCurrentThreadId () returned 0x1a00
	[0090.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0090.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xca8
	[0090.333] GetFileSizeEx (in: hFile=0xca8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5265) returned 1
	[0090.333] CreateFileMappingA (hFile=0xca8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xcac
	[0090.333] MapViewOfFile (hFileMappingObject=0xcac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.335] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.335] CloseHandle (hObject=0xcac) returned 1
	[0090.335] GetCurrentThreadId () returned 0x1a00
	[0090.335] FlushFileBuffers (hFile=0xca8) returned 1
	[0090.336] CloseHandle (hObject=0xca8) returned 1
	[0090.337] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 184
	[0090.337] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0090.337] free (_Block=0x3284880) 
	[0090.337] RtlExitUserThread (Status=0x0) 

Thread:
	id = 611
	os_tid = 0x1a04

	[0090.339] _alloca_probe () returned 0x40328a
	[0090.339] GetCurrentThreadId () returned 0x1a04
	[0090.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0090.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcac
	[0090.339] GetFileSizeEx (in: hFile=0xcac, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2617) returned 1
	[0090.339] CreateFileMappingA (hFile=0xcac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa41, lpName=0x0) returned 0xcb0
	[0090.340] MapViewOfFile (hFileMappingObject=0xcb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.341] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.341] CloseHandle (hObject=0xcb0) returned 1
	[0090.341] GetCurrentThreadId () returned 0x1a04
	[0090.341] FlushFileBuffers (hFile=0xcac) returned 1
	[0090.343] CloseHandle (hObject=0xcac) returned 1
	[0090.343] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 184
	[0090.343] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0090.344] free (_Block=0x32898a8) 
	[0090.344] RtlExitUserThread (Status=0x0) 

Thread:
	id = 612
	os_tid = 0x1a08

	[0090.400] _alloca_probe () returned 0x40328a
	[0090.400] GetCurrentThreadId () returned 0x1a08
	[0090.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0090.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcb0
	[0090.401] GetFileSizeEx (in: hFile=0xcb0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=10641) returned 1
	[0090.401] CreateFileMappingA (hFile=0xcb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0xcb4
	[0090.401] MapViewOfFile (hFileMappingObject=0xcb4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.403] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.403] CloseHandle (hObject=0xcb4) returned 1
	[0090.403] GetCurrentThreadId () returned 0x1a08
	[0090.403] FlushFileBuffers (hFile=0xcb0) returned 1
	[0090.405] CloseHandle (hObject=0xcb0) returned 1
	[0090.406] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 184
	[0090.406] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0090.407] free (_Block=0x3284880) 
	[0090.407] RtlExitUserThread (Status=0x0) 

Thread:
	id = 613
	os_tid = 0x1a0c

	[0090.409] _alloca_probe () returned 0x40328a
	[0090.409] GetCurrentThreadId () returned 0x1a0c
	[0090.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0090.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcb4
	[0090.410] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=15337) returned 1
	[0090.410] CreateFileMappingA (hFile=0xcb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bf1, lpName=0x0) returned 0xcb8
	[0090.410] MapViewOfFile (hFileMappingObject=0xcb8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.413] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.413] CloseHandle (hObject=0xcb8) returned 1
	[0090.413] GetCurrentThreadId () returned 0x1a0c
	[0090.413] FlushFileBuffers (hFile=0xcb4) returned 1
	[0090.730] CloseHandle (hObject=0xcb4) returned 1
	[0090.730] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 184
	[0090.730] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0090.731] free (_Block=0x32888a0) 
	[0090.731] RtlExitUserThread (Status=0x0) 

Thread:
	id = 614
	os_tid = 0x1a10

	[0090.415] _alloca_probe () returned 0x40328a
	[0090.416] GetCurrentThreadId () returned 0x1a10
	[0090.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0090.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcbc
	[0090.416] GetFileSizeEx (in: hFile=0xcbc, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=5329) returned 1
	[0090.416] CreateFileMappingA (hFile=0xcbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d1, lpName=0x0) returned 0xcc0
	[0090.416] MapViewOfFile (hFileMappingObject=0xcc0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.418] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.418] CloseHandle (hObject=0xcc0) returned 1
	[0090.418] GetCurrentThreadId () returned 0x1a10
	[0090.418] FlushFileBuffers (hFile=0xcbc) returned 1
	[0090.731] CloseHandle (hObject=0xcbc) returned 1
	[0090.731] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 184
	[0090.731] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0090.732] free (_Block=0x32898a8) 
	[0090.732] RtlExitUserThread (Status=0x0) 

Thread:
	id = 615
	os_tid = 0x1a14

	[0090.420] _alloca_probe () returned 0x40328a
	[0090.421] GetCurrentThreadId () returned 0x1a14
	[0090.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0090.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc4
	[0090.421] GetFileSizeEx (in: hFile=0xcc4, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=4977) returned 1
	[0090.421] CreateFileMappingA (hFile=0xcc4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1371, lpName=0x0) returned 0xcc8
	[0090.421] MapViewOfFile (hFileMappingObject=0xcc8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.423] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.423] CloseHandle (hObject=0xcc8) returned 1
	[0090.423] GetCurrentThreadId () returned 0x1a14
	[0090.423] FlushFileBuffers (hFile=0xcc4) returned 1
	[0090.733] CloseHandle (hObject=0xcc4) returned 1
	[0090.733] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 184
	[0090.733] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0090.733] free (_Block=0x3284880) 
	[0090.733] RtlExitUserThread (Status=0x0) 

Thread:
	id = 616
	os_tid = 0x1a18

	[0090.426] _alloca_probe () returned 0x40328a
	[0090.426] GetCurrentThreadId () returned 0x1a18
	[0090.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0090.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xccc
	[0090.427] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=5049) returned 1
	[0090.427] CreateFileMappingA (hFile=0xccc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xcd0
	[0090.427] MapViewOfFile (hFileMappingObject=0xcd0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.429] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.429] CloseHandle (hObject=0xcd0) returned 1
	[0090.429] GetCurrentThreadId () returned 0x1a18
	[0090.429] FlushFileBuffers (hFile=0xccc) returned 1
	[0090.734] CloseHandle (hObject=0xccc) returned 1
	[0090.734] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 184
	[0090.734] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0090.735] free (_Block=0x328c8c0) 
	[0090.735] RtlExitUserThread (Status=0x0) 

Thread:
	id = 617
	os_tid = 0x1a1c

	[0090.431] _alloca_probe () returned 0x40328a
	[0090.431] GetCurrentThreadId () returned 0x1a1c
	[0090.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0090.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd4
	[0090.432] GetFileSizeEx (in: hFile=0xcd4, lpFileSize=0x366ff5c | out: lpFileSize=0x366ff5c*=1161) returned 1
	[0090.432] CreateFileMappingA (hFile=0xcd4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x491, lpName=0x0) returned 0xcd8
	[0090.432] MapViewOfFile (hFileMappingObject=0xcd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.433] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.433] CloseHandle (hObject=0xcd8) returned 1
	[0090.433] GetCurrentThreadId () returned 0x1a1c
	[0090.433] FlushFileBuffers (hFile=0xcd4) returned 1
	[0090.735] CloseHandle (hObject=0xcd4) returned 1
	[0090.736] _swprintf (in: param_1=0x3669f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 184
	[0090.736] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0090.736] free (_Block=0x3285888) 
	[0090.736] RtlExitUserThread (Status=0x0) 

Thread:
	id = 618
	os_tid = 0x1a20

	[0090.435] _alloca_probe () returned 0x40328a
	[0090.435] GetCurrentThreadId () returned 0x1a20
	[0090.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0090.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcdc
	[0090.436] GetFileSizeEx (in: hFile=0xcdc, lpFileSize=0x37aff5c | out: lpFileSize=0x37aff5c*=7617) returned 1
	[0090.436] CreateFileMappingA (hFile=0xcdc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dc1, lpName=0x0) returned 0xce0
	[0090.436] MapViewOfFile (hFileMappingObject=0xce0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.438] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.438] CloseHandle (hObject=0xce0) returned 1
	[0090.438] GetCurrentThreadId () returned 0x1a20
	[0090.438] FlushFileBuffers (hFile=0xcdc) returned 1
	[0090.737] CloseHandle (hObject=0xcdc) returned 1
	[0090.737] _swprintf (in: param_1=0x37a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 184
	[0090.737] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0090.738] free (_Block=0x3286890) 
	[0090.738] RtlExitUserThread (Status=0x0) 

Thread:
	id = 619
	os_tid = 0x1a24

	[0090.440] _alloca_probe () returned 0x40328a
	[0090.440] GetCurrentThreadId () returned 0x1a24
	[0090.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0090.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xce4
	[0090.441] GetFileSizeEx (in: hFile=0xce4, lpFileSize=0x38eff5c | out: lpFileSize=0x38eff5c*=7017) returned 1
	[0090.441] CreateFileMappingA (hFile=0xce4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b71, lpName=0x0) returned 0xce8
	[0090.441] MapViewOfFile (hFileMappingObject=0xce8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.443] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.443] CloseHandle (hObject=0xce8) returned 1
	[0090.443] GetCurrentThreadId () returned 0x1a24
	[0090.443] FlushFileBuffers (hFile=0xce4) returned 1
	[0090.738] CloseHandle (hObject=0xce4) returned 1
	[0090.738] _swprintf (in: param_1=0x38e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 184
	[0090.739] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0090.742] free (_Block=0x3287898) 
	[0090.742] RtlExitUserThread (Status=0x0) 

Thread:
	id = 620
	os_tid = 0x1a28

	[0090.445] _alloca_probe () returned 0x40328a
	[0090.446] GetCurrentThreadId () returned 0x1a28
	[0090.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0090.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcec
	[0090.446] GetFileSizeEx (in: hFile=0xcec, lpFileSize=0x3afff5c | out: lpFileSize=0x3afff5c*=13273) returned 1
	[0090.446] CreateFileMappingA (hFile=0xcec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33e1, lpName=0x0) returned 0xcf0
	[0090.446] MapViewOfFile (hFileMappingObject=0xcf0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.449] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.449] CloseHandle (hObject=0xcf0) returned 1
	[0090.449] GetCurrentThreadId () returned 0x1a28
	[0090.449] FlushFileBuffers (hFile=0xcec) returned 1
	[0090.742] CloseHandle (hObject=0xcec) returned 1
	[0090.742] _swprintf (in: param_1=0x3af9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 184
	[0090.742] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0090.743] free (_Block=0x32908e0) 
	[0090.743] RtlExitUserThread (Status=0x0) 

Thread:
	id = 621
	os_tid = 0x1a2c

	[0090.451] _alloca_probe () returned 0x40328a
	[0090.452] GetCurrentThreadId () returned 0x1a2c
	[0090.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0090.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcf4
	[0090.452] GetFileSizeEx (in: hFile=0xcf4, lpFileSize=0x3bfff5c | out: lpFileSize=0x3bfff5c*=8601) returned 1
	[0090.452] CreateFileMappingA (hFile=0xcf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x21a1, lpName=0x0) returned 0xcf8
	[0090.452] MapViewOfFile (hFileMappingObject=0xcf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.454] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.454] CloseHandle (hObject=0xcf8) returned 1
	[0090.454] GetCurrentThreadId () returned 0x1a2c
	[0090.454] FlushFileBuffers (hFile=0xcf4) returned 1
	[0090.743] CloseHandle (hObject=0xcf4) returned 1
	[0090.744] _swprintf (in: param_1=0x3bf9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 184
	[0090.744] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0090.744] free (_Block=0x328e8d0) 
	[0090.744] RtlExitUserThread (Status=0x0) 

Thread:
	id = 622
	os_tid = 0x1a30

	[0090.457] _alloca_probe () returned 0x40328a
	[0090.457] GetCurrentThreadId () returned 0x1a30
	[0090.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0090.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcfc
	[0090.457] GetFileSizeEx (in: hFile=0xcfc, lpFileSize=0x3cfff5c | out: lpFileSize=0x3cfff5c*=4921) returned 1
	[0090.457] CreateFileMappingA (hFile=0xcfc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1341, lpName=0x0) returned 0xd00
	[0090.458] MapViewOfFile (hFileMappingObject=0xd00, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.459] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.459] CloseHandle (hObject=0xd00) returned 1
	[0090.459] GetCurrentThreadId () returned 0x1a30
	[0090.459] FlushFileBuffers (hFile=0xcfc) returned 1
	[0090.745] CloseHandle (hObject=0xcfc) returned 1
	[0090.745] _swprintf (in: param_1=0x3cf9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 184
	[0090.745] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0090.746] free (_Block=0x32938f8) 
	[0090.746] RtlExitUserThread (Status=0x0) 

Thread:
	id = 623
	os_tid = 0x1a34

	[0090.461] _alloca_probe () returned 0x40328a
	[0090.462] GetCurrentThreadId () returned 0x1a34
	[0090.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0090.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd04
	[0090.462] GetFileSizeEx (in: hFile=0xd04, lpFileSize=0x3dfff5c | out: lpFileSize=0x3dfff5c*=5409) returned 1
	[0090.462] CreateFileMappingA (hFile=0xd04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1521, lpName=0x0) returned 0xd08
	[0090.462] MapViewOfFile (hFileMappingObject=0xd08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.464] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.464] CloseHandle (hObject=0xd08) returned 1
	[0090.464] GetCurrentThreadId () returned 0x1a34
	[0090.464] FlushFileBuffers (hFile=0xd04) returned 1
	[0090.746] CloseHandle (hObject=0xd04) returned 1
	[0090.747] _swprintf (in: param_1=0x3df9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 184
	[0090.747] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0090.747] free (_Block=0x328f8d8) 
	[0090.747] RtlExitUserThread (Status=0x0) 

Thread:
	id = 624
	os_tid = 0x1a38

	[0090.466] _alloca_probe () returned 0x40328a
	[0090.467] GetCurrentThreadId () returned 0x1a38
	[0090.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0090.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0c
	[0090.467] GetFileSizeEx (in: hFile=0xd0c, lpFileSize=0x3f3ff5c | out: lpFileSize=0x3f3ff5c*=9248) returned 1
	[0090.467] CreateFileMappingA (hFile=0xd0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xd10
	[0090.467] MapViewOfFile (hFileMappingObject=0xd10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.469] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.469] CloseHandle (hObject=0xd10) returned 1
	[0090.469] GetCurrentThreadId () returned 0x1a38
	[0090.469] FlushFileBuffers (hFile=0xd0c) returned 1
	[0090.750] CloseHandle (hObject=0xd0c) returned 1
	[0090.750] _swprintf (in: param_1=0x3f39f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 184
	[0090.750] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0090.751] free (_Block=0x328d8c8) 
	[0090.751] RtlExitUserThread (Status=0x0) 

Thread:
	id = 625
	os_tid = 0x1a3c

	[0090.472] _alloca_probe () returned 0x40328a
	[0090.472] GetCurrentThreadId () returned 0x1a3c
	[0090.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0090.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd14
	[0090.473] GetFileSizeEx (in: hFile=0xd14, lpFileSize=0x407ff5c | out: lpFileSize=0x407ff5c*=5049) returned 1
	[0090.473] CreateFileMappingA (hFile=0xd14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xd18
	[0090.473] MapViewOfFile (hFileMappingObject=0xd18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.474] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.475] CloseHandle (hObject=0xd18) returned 1
	[0090.475] GetCurrentThreadId () returned 0x1a3c
	[0090.475] FlushFileBuffers (hFile=0xd14) returned 1
	[0090.752] CloseHandle (hObject=0xd14) returned 1
	[0090.752] _swprintf (in: param_1=0x4079f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 184
	[0090.752] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0090.753] free (_Block=0x3297918) 
	[0090.753] RtlExitUserThread (Status=0x0) 

Thread:
	id = 626
	os_tid = 0x1a40

	[0090.480] _alloca_probe () returned 0x40328a
	[0090.481] GetCurrentThreadId () returned 0x1a40
	[0090.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0090.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd1c
	[0090.481] GetFileSizeEx (in: hFile=0xd1c, lpFileSize=0x41bff5c | out: lpFileSize=0x41bff5c*=4409) returned 1
	[0090.481] CreateFileMappingA (hFile=0xd1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1141, lpName=0x0) returned 0xd20
	[0090.481] MapViewOfFile (hFileMappingObject=0xd20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.482] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.483] CloseHandle (hObject=0xd20) returned 1
	[0090.483] GetCurrentThreadId () returned 0x1a40
	[0090.483] FlushFileBuffers (hFile=0xd1c) returned 1
	[0090.753] CloseHandle (hObject=0xd1c) returned 1
	[0090.753] _swprintf (in: param_1=0x41b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 184
	[0090.753] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0090.754] free (_Block=0x3294900) 
	[0090.754] RtlExitUserThread (Status=0x0) 

Thread:
	id = 627
	os_tid = 0x1a44

	[0090.485] _alloca_probe () returned 0x40328a
	[0090.485] GetCurrentThreadId () returned 0x1a44
	[0090.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0090.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd24
	[0090.486] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x42fff5c | out: lpFileSize=0x42fff5c*=3993) returned 1
	[0090.486] CreateFileMappingA (hFile=0xd24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfa1, lpName=0x0) returned 0xd28
	[0090.486] MapViewOfFile (hFileMappingObject=0xd28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.487] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.487] CloseHandle (hObject=0xd28) returned 1
	[0090.487] GetCurrentThreadId () returned 0x1a44
	[0090.487] FlushFileBuffers (hFile=0xd24) returned 1
	[0090.755] CloseHandle (hObject=0xd24) returned 1
	[0090.755] _swprintf (in: param_1=0x42f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 184
	[0090.755] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0090.755] free (_Block=0x32928f0) 
	[0090.756] RtlExitUserThread (Status=0x0) 

Thread:
	id = 628
	os_tid = 0x1a48

	[0090.538] _alloca_probe () returned 0x40328a
	[0090.539] GetCurrentThreadId () returned 0x1a48
	[0090.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0090.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0090.539] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x443ff5c | out: lpFileSize=0x443ff5c*=3385) returned 1
	[0090.539] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd41, lpName=0x0) returned 0xd30
	[0090.540] MapViewOfFile (hFileMappingObject=0xd30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.541] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.541] CloseHandle (hObject=0xd30) returned 1
	[0090.541] GetCurrentThreadId () returned 0x1a48
	[0090.541] FlushFileBuffers (hFile=0xd2c) returned 1
	[0090.756] CloseHandle (hObject=0xd2c) returned 1
	[0090.756] _swprintf (in: param_1=0x4439f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 184
	[0090.756] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0090.757] free (_Block=0x3296910) 
	[0090.757] RtlExitUserThread (Status=0x0) 

Thread:
	id = 629
	os_tid = 0x1a4c

	[0090.543] _alloca_probe () returned 0x40328a
	[0090.543] GetCurrentThreadId () returned 0x1a4c
	[0090.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0090.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd34
	[0090.544] GetFileSizeEx (in: hFile=0xd34, lpFileSize=0x457ff5c | out: lpFileSize=0x457ff5c*=3120) returned 1
	[0090.544] CreateFileMappingA (hFile=0xd34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xd38
	[0090.544] MapViewOfFile (hFileMappingObject=0xd38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.545] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.545] CloseHandle (hObject=0xd38) returned 1
	[0090.545] GetCurrentThreadId () returned 0x1a4c
	[0090.545] FlushFileBuffers (hFile=0xd34) returned 1
	[0090.757] CloseHandle (hObject=0xd34) returned 1
	[0090.758] _swprintf (in: param_1=0x4579f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 184
	[0090.758] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0090.758] free (_Block=0x32918e8) 
	[0090.758] RtlExitUserThread (Status=0x0) 

Thread:
	id = 630
	os_tid = 0x1a50

	[0090.547] _alloca_probe () returned 0x40328a
	[0090.548] GetCurrentThreadId () returned 0x1a50
	[0090.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0090.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd3c
	[0090.548] GetFileSizeEx (in: hFile=0xd3c, lpFileSize=0x46bff5c | out: lpFileSize=0x46bff5c*=13537) returned 1
	[0090.548] CreateFileMappingA (hFile=0xd3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34e1, lpName=0x0) returned 0xd40
	[0090.548] MapViewOfFile (hFileMappingObject=0xd40, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.551] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.551] CloseHandle (hObject=0xd40) returned 1
	[0090.551] GetCurrentThreadId () returned 0x1a50
	[0090.551] FlushFileBuffers (hFile=0xd3c) returned 1
	[0090.759] CloseHandle (hObject=0xd3c) returned 1
	[0090.759] _swprintf (in: param_1=0x46b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 184
	[0090.759] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0090.760] free (_Block=0x329a930) 
	[0090.760] RtlExitUserThread (Status=0x0) 

Thread:
	id = 631
	os_tid = 0x1a54

	[0090.556] _alloca_probe () returned 0x40328a
	[0090.556] GetCurrentThreadId () returned 0x1a54
	[0090.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0090.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd44
	[0090.557] GetFileSizeEx (in: hFile=0xd44, lpFileSize=0x47fff5c | out: lpFileSize=0x47fff5c*=20209) returned 1
	[0090.557] CreateFileMappingA (hFile=0xd44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0xd48
	[0090.557] MapViewOfFile (hFileMappingObject=0xd48, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.561] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.561] CloseHandle (hObject=0xd48) returned 1
	[0090.561] GetCurrentThreadId () returned 0x1a54
	[0090.561] FlushFileBuffers (hFile=0xd44) returned 1
	[0090.760] CloseHandle (hObject=0xd44) returned 1
	[0090.760] _swprintf (in: param_1=0x47f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 184
	[0090.760] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0090.761] free (_Block=0x329d948) 
	[0090.761] RtlExitUserThread (Status=0x0) 

Thread:
	id = 632
	os_tid = 0x1a58

	[0090.563] _alloca_probe () returned 0x40328a
	[0090.563] GetCurrentThreadId () returned 0x1a58
	[0090.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0090.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4c
	[0090.564] GetFileSizeEx (in: hFile=0xd4c, lpFileSize=0x493ff5c | out: lpFileSize=0x493ff5c*=20473) returned 1
	[0090.564] CreateFileMappingA (hFile=0xd4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5001, lpName=0x0) returned 0xd50
	[0090.564] MapViewOfFile (hFileMappingObject=0xd50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.568] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.569] CloseHandle (hObject=0xd50) returned 1
	[0090.569] GetCurrentThreadId () returned 0x1a58
	[0090.569] FlushFileBuffers (hFile=0xd4c) returned 1
	[0090.761] CloseHandle (hObject=0xd4c) returned 1
	[0090.762] _swprintf (in: param_1=0x4939f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 184
	[0090.762] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0090.762] free (_Block=0x329c940) 
	[0090.762] RtlExitUserThread (Status=0x0) 

Thread:
	id = 633
	os_tid = 0x1a5c

	[0090.571] _alloca_probe () returned 0x40328a
	[0090.571] GetCurrentThreadId () returned 0x1a5c
	[0090.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0090.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd54
	[0090.572] GetFileSizeEx (in: hFile=0xd54, lpFileSize=0x4a7ff5c | out: lpFileSize=0x4a7ff5c*=15745) returned 1
	[0090.572] CreateFileMappingA (hFile=0xd54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xd58
	[0090.572] MapViewOfFile (hFileMappingObject=0xd58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.575] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.575] CloseHandle (hObject=0xd58) returned 1
	[0090.575] GetCurrentThreadId () returned 0x1a5c
	[0090.575] FlushFileBuffers (hFile=0xd54) returned 1
	[0090.763] CloseHandle (hObject=0xd54) returned 1
	[0090.763] _swprintf (in: param_1=0x4a79f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 184
	[0090.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0090.764] free (_Block=0x3298920) 
	[0090.764] RtlExitUserThread (Status=0x0) 

Thread:
	id = 634
	os_tid = 0x1a60

	[0090.577] _alloca_probe () returned 0x40328a
	[0090.578] GetCurrentThreadId () returned 0x1a60
	[0090.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0090.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd5c
	[0090.578] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x4bbff5c | out: lpFileSize=0x4bbff5c*=9024) returned 1
	[0090.578] CreateFileMappingA (hFile=0xd5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xd60
	[0090.578] MapViewOfFile (hFileMappingObject=0xd60, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.580] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.581] CloseHandle (hObject=0xd60) returned 1
	[0090.581] GetCurrentThreadId () returned 0x1a60
	[0090.581] FlushFileBuffers (hFile=0xd5c) returned 1
	[0090.764] CloseHandle (hObject=0xd5c) returned 1
	[0090.764] _swprintf (in: param_1=0x4bb9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 213
	[0090.764] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0090.765] free (_Block=0x329e950) 
	[0090.765] RtlExitUserThread (Status=0x0) 

Thread:
	id = 635
	os_tid = 0x1a64

	[0090.583] _alloca_probe () returned 0x40328a
	[0090.583] GetCurrentThreadId () returned 0x1a64
	[0090.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0090.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd64
	[0090.584] GetFileSizeEx (in: hFile=0xd64, lpFileSize=0x4cfff5c | out: lpFileSize=0x4cfff5c*=7216) returned 1
	[0090.584] CreateFileMappingA (hFile=0xd64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xd68
	[0090.584] MapViewOfFile (hFileMappingObject=0xd68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.585] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.586] CloseHandle (hObject=0xd68) returned 1
	[0090.586] GetCurrentThreadId () returned 0x1a64
	[0090.586] FlushFileBuffers (hFile=0xd64) returned 1
	[0090.765] CloseHandle (hObject=0xd64) returned 1
	[0090.766] _swprintf (in: param_1=0x4cf9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 213
	[0090.766] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0090.766] free (_Block=0x329f958) 
	[0090.766] RtlExitUserThread (Status=0x0) 

Thread:
	id = 636
	os_tid = 0x1a68

	[0090.679] _alloca_probe () returned 0x40328a
	[0090.679] GetCurrentThreadId () returned 0x1a68
	[0090.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0090.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd6c
	[0090.679] GetFileSizeEx (in: hFile=0xd6c, lpFileSize=0x4e3ff5c | out: lpFileSize=0x4e3ff5c*=14881) returned 1
	[0090.679] CreateFileMappingA (hFile=0xd6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xd70
	[0090.680] MapViewOfFile (hFileMappingObject=0xd70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.683] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.683] CloseHandle (hObject=0xd70) returned 1
	[0090.683] GetCurrentThreadId () returned 0x1a68
	[0090.683] FlushFileBuffers (hFile=0xd6c) returned 1
	[0090.767] CloseHandle (hObject=0xd6c) returned 1
	[0090.767] _swprintf (in: param_1=0x4e39f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 213
	[0090.767] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0090.768] free (_Block=0x3299928) 
	[0090.768] RtlExitUserThread (Status=0x0) 

Thread:
	id = 637
	os_tid = 0x1a6c

	[0090.687] _alloca_probe () returned 0x40328a
	[0090.688] GetCurrentThreadId () returned 0x1a6c
	[0090.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0090.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd74
	[0090.688] GetFileSizeEx (in: hFile=0xd74, lpFileSize=0x4f7ff5c | out: lpFileSize=0x4f7ff5c*=6721) returned 1
	[0090.688] CreateFileMappingA (hFile=0xd74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a41, lpName=0x0) returned 0xd78
	[0090.688] MapViewOfFile (hFileMappingObject=0xd78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.690] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.690] CloseHandle (hObject=0xd78) returned 1
	[0090.690] GetCurrentThreadId () returned 0x1a6c
	[0090.690] FlushFileBuffers (hFile=0xd74) returned 1
	[0090.769] CloseHandle (hObject=0xd74) returned 1
	[0090.769] _swprintf (in: param_1=0x4f79f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 213
	[0090.769] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0090.770] free (_Block=0x32a0960) 
	[0090.770] RtlExitUserThread (Status=0x0) 

Thread:
	id = 638
	os_tid = 0x1a70

	[0090.692] _alloca_probe () returned 0x40328a
	[0090.693] GetCurrentThreadId () returned 0x1a70
	[0090.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0090.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd7c
	[0090.693] GetFileSizeEx (in: hFile=0xd7c, lpFileSize=0x50bff5c | out: lpFileSize=0x50bff5c*=3265) returned 1
	[0090.693] CreateFileMappingA (hFile=0xd7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0xd80
	[0090.693] MapViewOfFile (hFileMappingObject=0xd80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.694] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.694] CloseHandle (hObject=0xd80) returned 1
	[0090.694] GetCurrentThreadId () returned 0x1a70
	[0090.694] FlushFileBuffers (hFile=0xd7c) returned 1
	[0090.770] CloseHandle (hObject=0xd7c) returned 1
	[0090.770] _swprintf (in: param_1=0x50b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 213
	[0090.770] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0090.771] free (_Block=0x32a1968) 
	[0090.771] RtlExitUserThread (Status=0x0) 

Thread:
	id = 639
	os_tid = 0x1a74

	[0090.697] _alloca_probe () returned 0x40328a
	[0090.697] GetCurrentThreadId () returned 0x1a74
	[0090.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0090.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd84
	[0090.697] GetFileSizeEx (in: hFile=0xd84, lpFileSize=0x51fff5c | out: lpFileSize=0x51fff5c*=8097) returned 1
	[0090.697] CreateFileMappingA (hFile=0xd84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xd88
	[0090.698] MapViewOfFile (hFileMappingObject=0xd88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.699] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.699] CloseHandle (hObject=0xd88) returned 1
	[0090.700] GetCurrentThreadId () returned 0x1a74
	[0090.700] FlushFileBuffers (hFile=0xd84) returned 1
	[0090.772] CloseHandle (hObject=0xd84) returned 1
	[0090.772] _swprintf (in: param_1=0x51f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 213
	[0090.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0090.772] free (_Block=0x32a2970) 
	[0090.773] RtlExitUserThread (Status=0x0) 

Thread:
	id = 640
	os_tid = 0x1a78

	[0090.702] _alloca_probe () returned 0x40328a
	[0090.702] GetCurrentThreadId () returned 0x1a78
	[0090.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0090.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8c
	[0090.702] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0x533ff5c | out: lpFileSize=0x533ff5c*=7713) returned 1
	[0090.703] CreateFileMappingA (hFile=0xd8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e21, lpName=0x0) returned 0xd90
	[0090.703] MapViewOfFile (hFileMappingObject=0xd90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.704] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.705] CloseHandle (hObject=0xd90) returned 1
	[0090.705] GetCurrentThreadId () returned 0x1a78
	[0090.705] FlushFileBuffers (hFile=0xd8c) returned 1
	[0090.773] CloseHandle (hObject=0xd8c) returned 1
	[0090.773] _swprintf (in: param_1=0x5339f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 213
	[0090.773] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0090.774] free (_Block=0x329b938) 
	[0090.774] RtlExitUserThread (Status=0x0) 

Thread:
	id = 641
	os_tid = 0x1a7c

	[0090.707] _alloca_probe () returned 0x40328a
	[0090.707] GetCurrentThreadId () returned 0x1a7c
	[0090.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0090.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd94
	[0090.708] GetFileSizeEx (in: hFile=0xd94, lpFileSize=0x547ff5c | out: lpFileSize=0x547ff5c*=11905) returned 1
	[0090.708] CreateFileMappingA (hFile=0xd94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0xd98
	[0090.708] MapViewOfFile (hFileMappingObject=0xd98, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.710] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.711] CloseHandle (hObject=0xd98) returned 1
	[0090.711] GetCurrentThreadId () returned 0x1a7c
	[0090.711] FlushFileBuffers (hFile=0xd94) returned 1
	[0090.774] CloseHandle (hObject=0xd94) returned 1
	[0090.775] _swprintf (in: param_1=0x5479f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 213
	[0090.775] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0090.775] free (_Block=0x3277890) 
	[0090.775] RtlExitUserThread (Status=0x0) 

Thread:
	id = 642
	os_tid = 0x1a80

	[0090.713] _alloca_probe () returned 0x40328a
	[0090.713] GetCurrentThreadId () returned 0x1a80
	[0090.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0090.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd9c
	[0090.713] GetFileSizeEx (in: hFile=0xd9c, lpFileSize=0x55bff5c | out: lpFileSize=0x55bff5c*=529) returned 1
	[0090.714] CreateFileMappingA (hFile=0xd9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xda0
	[0090.714] MapViewOfFile (hFileMappingObject=0xda0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.714] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.714] CloseHandle (hObject=0xda0) returned 1
	[0090.714] GetCurrentThreadId () returned 0x1a80
	[0090.714] FlushFileBuffers (hFile=0xd9c) returned 1
	[0090.776] CloseHandle (hObject=0xd9c) returned 1
	[0090.776] _swprintf (in: param_1=0x55b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 213
	[0090.776] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0090.777] free (_Block=0x3278898) 
	[0090.777] RtlExitUserThread (Status=0x0) 

Thread:
	id = 643
	os_tid = 0x1a84

	[0090.719] _alloca_probe () returned 0x40328a
	[0090.719] GetCurrentThreadId () returned 0x1a84
	[0090.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0090.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xda4
	[0090.719] GetFileSizeEx (in: hFile=0xda4, lpFileSize=0x56fff5c | out: lpFileSize=0x56fff5c*=529) returned 1
	[0090.719] CreateFileMappingA (hFile=0xda4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xda8
	[0090.720] MapViewOfFile (hFileMappingObject=0xda8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.720] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.720] CloseHandle (hObject=0xda8) returned 1
	[0090.720] GetCurrentThreadId () returned 0x1a84
	[0090.720] FlushFileBuffers (hFile=0xda4) returned 1
	[0090.777] CloseHandle (hObject=0xda4) returned 1
	[0090.777] _swprintf (in: param_1=0x56f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 213
	[0090.778] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0090.778] free (_Block=0x327b8b0) 
	[0090.778] RtlExitUserThread (Status=0x0) 

Thread:
	id = 644
	os_tid = 0x1a88

	[0090.723] _alloca_probe () returned 0x40328a
	[0090.723] GetCurrentThreadId () returned 0x1a88
	[0090.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0090.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdac
	[0090.723] GetFileSizeEx (in: hFile=0xdac, lpFileSize=0x583ff5c | out: lpFileSize=0x583ff5c*=12737) returned 1
	[0090.723] CreateFileMappingA (hFile=0xdac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31c1, lpName=0x0) returned 0xdb0
	[0090.724] MapViewOfFile (hFileMappingObject=0xdb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.726] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.726] CloseHandle (hObject=0xdb0) returned 1
	[0090.726] GetCurrentThreadId () returned 0x1a88
	[0090.726] FlushFileBuffers (hFile=0xdac) returned 1
	[0090.779] CloseHandle (hObject=0xdac) returned 1
	[0090.779] _swprintf (in: param_1=0x5839f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 213
	[0090.779] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0090.779] free (_Block=0x32798a0) 
	[0090.779] RtlExitUserThread (Status=0x0) 

Thread:
	id = 645
	os_tid = 0x1a8c

	[0090.819] _alloca_probe () returned 0x40328a
	[0090.819] GetCurrentThreadId () returned 0x1a8c
	[0090.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0090.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xda4
	[0090.820] GetFileSizeEx (in: hFile=0xda4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3521) returned 1
	[0090.820] CreateFileMappingA (hFile=0xda4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc1, lpName=0x0) returned 0xd9c
	[0090.820] MapViewOfFile (hFileMappingObject=0xd9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.821] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.821] CloseHandle (hObject=0xd9c) returned 1
	[0090.821] GetCurrentThreadId () returned 0x1a8c
	[0090.821] FlushFileBuffers (hFile=0xda4) returned 1
	[0090.831] CloseHandle (hObject=0xda4) returned 1
	[0090.831] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 213
	[0090.831] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0090.832] free (_Block=0x3284880) 
	[0090.832] RtlExitUserThread (Status=0x0) 

Thread:
	id = 646
	os_tid = 0x1a90

	[0090.833] _alloca_probe () returned 0x40328a
	[0090.833] GetCurrentThreadId () returned 0x1a90
	[0090.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0090.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xda4
	[0090.834] GetFileSizeEx (in: hFile=0xda4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=3169) returned 1
	[0090.834] CreateFileMappingA (hFile=0xda4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc61, lpName=0x0) returned 0xd94
	[0090.834] MapViewOfFile (hFileMappingObject=0xd94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0090.835] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0090.835] CloseHandle (hObject=0xd94) returned 1
	[0090.835] GetCurrentThreadId () returned 0x1a90
	[0090.835] FlushFileBuffers (hFile=0xda4) returned 1
	[0090.837] CloseHandle (hObject=0xda4) returned 1
	[0090.837] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 213
	[0090.837] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0090.838] free (_Block=0x32898a8) 
	[0090.838] RtlExitUserThread (Status=0x0) 

Thread:
	id = 647
	os_tid = 0x1a94

	[0090.839] _alloca_probe () returned 0x40328a
	[0090.840] GetCurrentThreadId () returned 0x1a94
	[0090.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0090.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd94
	[0090.840] GetFileSizeEx (in: hFile=0xd94, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12497) returned 1
	[0090.840] CreateFileMappingA (hFile=0xd94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30d1, lpName=0x0) returned 0xd8c
	[0090.840] MapViewOfFile (hFileMappingObject=0xd8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.843] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.843] CloseHandle (hObject=0xd8c) returned 1
	[0090.843] GetCurrentThreadId () returned 0x1a94
	[0090.843] FlushFileBuffers (hFile=0xd94) returned 1
	[0090.845] CloseHandle (hObject=0xd94) returned 1
	[0090.845] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 213
	[0090.845] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0090.846] free (_Block=0x3284880) 
	[0090.846] RtlExitUserThread (Status=0x0) 

Thread:
	id = 648
	os_tid = 0x1a98

	[0090.847] _alloca_probe () returned 0x40328a
	[0090.848] GetCurrentThreadId () returned 0x1a98
	[0090.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0090.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8c
	[0090.848] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5265) returned 1
	[0090.848] CreateFileMappingA (hFile=0xd8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xd84
	[0090.848] MapViewOfFile (hFileMappingObject=0xd84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.850] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.850] CloseHandle (hObject=0xd84) returned 1
	[0090.850] GetCurrentThreadId () returned 0x1a98
	[0090.850] FlushFileBuffers (hFile=0xd8c) returned 1
	[0090.852] CloseHandle (hObject=0xd8c) returned 1
	[0090.852] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 213
	[0090.852] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0090.853] free (_Block=0x3286890) 
	[0090.853] RtlExitUserThread (Status=0x0) 

Thread:
	id = 649
	os_tid = 0x1a9c

	[0090.854] _alloca_probe () returned 0x40328a
	[0090.855] GetCurrentThreadId () returned 0x1a9c
	[0090.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0090.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd84
	[0090.855] GetFileSizeEx (in: hFile=0xd84, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=2625) returned 1
	[0090.855] CreateFileMappingA (hFile=0xd84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa41, lpName=0x0) returned 0xd7c
	[0090.855] MapViewOfFile (hFileMappingObject=0xd7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.856] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.856] CloseHandle (hObject=0xd7c) returned 1
	[0090.856] GetCurrentThreadId () returned 0x1a9c
	[0090.856] FlushFileBuffers (hFile=0xd84) returned 1
	[0090.861] CloseHandle (hObject=0xd84) returned 1
	[0090.861] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 213
	[0090.861] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0090.861] free (_Block=0x3287898) 
	[0090.861] RtlExitUserThread (Status=0x0) 

Thread:
	id = 650
	os_tid = 0x1aa0

	[0090.863] _alloca_probe () returned 0x40328a
	[0090.863] GetCurrentThreadId () returned 0x1aa0
	[0090.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0090.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd7c
	[0090.864] GetFileSizeEx (in: hFile=0xd7c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=10641) returned 1
	[0090.864] CreateFileMappingA (hFile=0xd7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0xd74
	[0090.864] MapViewOfFile (hFileMappingObject=0xd74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.866] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.867] CloseHandle (hObject=0xd74) returned 1
	[0090.867] GetCurrentThreadId () returned 0x1aa0
	[0090.867] FlushFileBuffers (hFile=0xd7c) returned 1
	[0090.868] CloseHandle (hObject=0xd7c) returned 1
	[0090.869] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 213
	[0090.869] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0090.869] free (_Block=0x3286890) 
	[0090.869] RtlExitUserThread (Status=0x0) 

Thread:
	id = 651
	os_tid = 0x1aa4

	[0090.898] _alloca_probe () returned 0x40328a
	[0090.898] GetCurrentThreadId () returned 0x1aa4
	[0090.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", dwFileAttributes=0x80) returned 1
	[0090.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd74
	[0090.899] GetFileSizeEx (in: hFile=0xd74, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=1220) returned 1
	[0090.899] CreateFileMappingA (hFile=0xd74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c7, lpName=0x0) returned 0xd6c
	[0090.899] MapViewOfFile (hFileMappingObject=0xd6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0090.900] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0090.900] CloseHandle (hObject=0xd6c) returned 1
	[0090.900] GetCurrentThreadId () returned 0x1aa4
	[0090.900] FlushFileBuffers (hFile=0xd74) returned 1
	[0090.903] CloseHandle (hObject=0xd74) returned 1
	[0090.903] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0075478.gif") returned 97
	[0090.903] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0075478.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0075478.gif")) returned 1
	[0090.904] free (_Block=0x328c8c0) 
	[0090.904] RtlExitUserThread (Status=0x0) 

Thread:
	id = 652
	os_tid = 0x1aa8

	[0091.201] _alloca_probe () returned 0x40328a
	[0091.201] GetCurrentThreadId () returned 0x1aa8
	[0091.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", dwFileAttributes=0x80) returned 1
	[0091.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd6c
	[0091.203] GetFileSizeEx (in: hFile=0xd6c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=24759) returned 1
	[0091.203] CreateFileMappingA (hFile=0xd6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x60bd, lpName=0x0) returned 0xd64
	[0091.204] MapViewOfFile (hFileMappingObject=0xd64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.210] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.210] CloseHandle (hObject=0xd64) returned 1
	[0091.210] GetCurrentThreadId () returned 0x1aa8
	[0091.210] FlushFileBuffers (hFile=0xd6c) returned 1
	[0091.215] CloseHandle (hObject=0xd6c) returned 1
	[0091.215] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099145.jpg") returned 97
	[0091.215] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099145.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099145.jpg")) returned 1
	[0091.216] free (_Block=0x3287898) 
	[0091.216] RtlExitUserThread (Status=0x0) 

Thread:
	id = 653
	os_tid = 0x1aac

	[0091.212] _alloca_probe () returned 0x40328a
	[0091.212] GetCurrentThreadId () returned 0x1aac
	[0091.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", dwFileAttributes=0x80) returned 1
	[0091.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd5c
	[0091.214] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=24377) returned 1
	[0091.214] CreateFileMappingA (hFile=0xd5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5f41, lpName=0x0) returned 0xd54
	[0091.214] MapViewOfFile (hFileMappingObject=0xd54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.221] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.222] CloseHandle (hObject=0xd54) returned 1
	[0091.222] GetCurrentThreadId () returned 0x1aac
	[0091.222] FlushFileBuffers (hFile=0xd5c) returned 1
	[0091.225] CloseHandle (hObject=0xd5c) returned 1
	[0091.225] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099147.jpg") returned 97
	[0091.225] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099147.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099147.jpg")) returned 1
	[0091.226] free (_Block=0x32888a0) 
	[0091.226] RtlExitUserThread (Status=0x0) 

Thread:
	id = 654
	os_tid = 0x1ab0

	[0091.227] _alloca_probe () returned 0x40328a
	[0091.228] GetCurrentThreadId () returned 0x1ab0
	[0091.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", dwFileAttributes=0x80) returned 1
	[0091.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd5c
	[0091.228] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=18258) returned 1
	[0091.228] CreateFileMappingA (hFile=0xd5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4753, lpName=0x0) returned 0xd6c
	[0091.228] MapViewOfFile (hFileMappingObject=0xd6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.232] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.233] CloseHandle (hObject=0xd6c) returned 1
	[0091.233] GetCurrentThreadId () returned 0x1ab0
	[0091.233] FlushFileBuffers (hFile=0xd5c) returned 1
	[0091.237] CloseHandle (hObject=0xd5c) returned 1
	[0091.237] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099148.jpg") returned 97
	[0091.237] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099148.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099148.jpg")) returned 1
	[0091.238] free (_Block=0x3286890) 
	[0091.238] RtlExitUserThread (Status=0x0) 

Thread:
	id = 655
	os_tid = 0x1ab4

	[0091.234] _alloca_probe () returned 0x40328a
	[0091.235] GetCurrentThreadId () returned 0x1ab4
	[0091.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", dwFileAttributes=0x80) returned 1
	[0091.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4c
	[0091.236] GetFileSizeEx (in: hFile=0xd4c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=21914) returned 1
	[0091.236] CreateFileMappingA (hFile=0xd4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x55a3, lpName=0x0) returned 0xd44
	[0091.236] MapViewOfFile (hFileMappingObject=0xd44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.242] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.242] CloseHandle (hObject=0xd44) returned 1
	[0091.242] GetCurrentThreadId () returned 0x1ab4
	[0091.242] FlushFileBuffers (hFile=0xd4c) returned 1
	[0091.246] CloseHandle (hObject=0xd4c) returned 1
	[0091.247] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099150.jpg") returned 97
	[0091.247] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099150.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099150.jpg")) returned 1
	[0091.247] free (_Block=0x328c8c0) 
	[0091.247] RtlExitUserThread (Status=0x0) 

Thread:
	id = 656
	os_tid = 0x1ab8

	[0091.245] _alloca_probe () returned 0x40328a
	[0091.245] GetCurrentThreadId () returned 0x1ab8
	[0091.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", dwFileAttributes=0x80) returned 1
	[0091.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd5c
	[0091.246] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=11694) returned 1
	[0091.246] CreateFileMappingA (hFile=0xd5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2dbb, lpName=0x0) returned 0xd3c
	[0091.246] MapViewOfFile (hFileMappingObject=0xd3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.250] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.250] CloseHandle (hObject=0xd3c) returned 1
	[0091.250] GetCurrentThreadId () returned 0x1ab8
	[0091.250] FlushFileBuffers (hFile=0xd5c) returned 1
	[0091.254] CloseHandle (hObject=0xd5c) returned 1
	[0091.254] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099152.jpg") returned 97
	[0091.254] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099152.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099152.jpg")) returned 1
	[0091.255] free (_Block=0x32888a0) 
	[0091.255] RtlExitUserThread (Status=0x0) 

Thread:
	id = 657
	os_tid = 0x1abc

	[0091.256] _alloca_probe () returned 0x40328a
	[0091.257] GetCurrentThreadId () returned 0x1abc
	[0091.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", dwFileAttributes=0x80) returned 1
	[0091.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd3c
	[0091.257] GetFileSizeEx (in: hFile=0xd3c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=6929) returned 1
	[0091.257] CreateFileMappingA (hFile=0xd3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b11, lpName=0x0) returned 0xd4c
	[0091.257] MapViewOfFile (hFileMappingObject=0xd4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.259] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.259] CloseHandle (hObject=0xd4c) returned 1
	[0091.259] GetCurrentThreadId () returned 0x1abc
	[0091.259] FlushFileBuffers (hFile=0xd3c) returned 1
	[0091.262] CloseHandle (hObject=0xd3c) returned 1
	[0091.263] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099154.jpg") returned 97
	[0091.263] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099154.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099154.jpg")) returned 1
	[0091.264] free (_Block=0x3286890) 
	[0091.264] RtlExitUserThread (Status=0x0) 

Thread:
	id = 658
	os_tid = 0x1ac0

	[0091.261] _alloca_probe () returned 0x40328a
	[0091.262] GetCurrentThreadId () returned 0x1ac0
	[0091.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", dwFileAttributes=0x80) returned 1
	[0091.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd34
	[0091.264] GetFileSizeEx (in: hFile=0xd34, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=8826) returned 1
	[0091.264] CreateFileMappingA (hFile=0xd34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2283, lpName=0x0) returned 0xd2c
	[0091.264] MapViewOfFile (hFileMappingObject=0xd2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.267] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.267] CloseHandle (hObject=0xd2c) returned 1
	[0091.267] GetCurrentThreadId () returned 0x1ac0
	[0091.267] FlushFileBuffers (hFile=0xd34) returned 1
	[0091.269] CloseHandle (hObject=0xd34) returned 1
	[0091.269] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099155.jpg") returned 97
	[0091.269] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099155.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099155.jpg")) returned 1
	[0091.270] free (_Block=0x328c8c0) 
	[0091.270] RtlExitUserThread (Status=0x0) 

Thread:
	id = 659
	os_tid = 0x1ac4

	[0091.317] _alloca_probe () returned 0x40328a
	[0091.318] GetCurrentThreadId () returned 0x1ac4
	[0091.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", dwFileAttributes=0x80) returned 1
	[0091.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0091.318] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=13954) returned 1
	[0091.318] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3683, lpName=0x0) returned 0xd3c
	[0091.319] MapViewOfFile (hFileMappingObject=0xd3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.322] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.322] CloseHandle (hObject=0xd3c) returned 1
	[0091.322] GetCurrentThreadId () returned 0x1ac4
	[0091.322] FlushFileBuffers (hFile=0xd2c) returned 1
	[0091.327] CloseHandle (hObject=0xd2c) returned 1
	[0091.328] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099156.jpg") returned 97
	[0091.328] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099156.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099156.jpg")) returned 1
	[0091.329] free (_Block=0x3287898) 
	[0091.329] RtlExitUserThread (Status=0x0) 

Thread:
	id = 660
	os_tid = 0x1ac8

	[0091.323] _alloca_probe () returned 0x40328a
	[0091.324] GetCurrentThreadId () returned 0x1ac8
	[0091.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", dwFileAttributes=0x80) returned 1
	[0091.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd24
	[0091.324] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=9671) returned 1
	[0091.324] CreateFileMappingA (hFile=0xd24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25cd, lpName=0x0) returned 0xd1c
	[0091.324] MapViewOfFile (hFileMappingObject=0xd1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.327] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.327] CloseHandle (hObject=0xd1c) returned 1
	[0091.327] GetCurrentThreadId () returned 0x1ac8
	[0091.327] FlushFileBuffers (hFile=0xd24) returned 1
	[0091.330] CloseHandle (hObject=0xd24) returned 1
	[0091.330] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099157.jpg") returned 97
	[0091.330] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099157.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099157.jpg")) returned 1
	[0091.333] free (_Block=0x3286890) 
	[0091.333] RtlExitUserThread (Status=0x0) 

Thread:
	id = 661
	os_tid = 0x1acc

	[0091.488] _alloca_probe () returned 0x40328a
	[0091.489] GetCurrentThreadId () returned 0x1acc
	[0091.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", dwFileAttributes=0x80) returned 1
	[0091.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0091.489] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=15145) returned 1
	[0091.489] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b31, lpName=0x0) returned 0xd1c
	[0091.489] MapViewOfFile (hFileMappingObject=0xd1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.492] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.492] CloseHandle (hObject=0xd1c) returned 1
	[0091.492] GetCurrentThreadId () returned 0x1acc
	[0091.492] FlushFileBuffers (hFile=0xd2c) returned 1
	[0091.496] CloseHandle (hObject=0xd2c) returned 1
	[0091.496] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099160.jpg") returned 97
	[0091.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099160.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099160.jpg")) returned 1
	[0091.498] free (_Block=0x32888a0) 
	[0091.498] RtlExitUserThread (Status=0x0) 

Thread:
	id = 662
	os_tid = 0x1ad0

	[0091.495] _alloca_probe () returned 0x40328a
	[0091.495] GetCurrentThreadId () returned 0x1ad0
	[0091.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", dwFileAttributes=0x80) returned 1
	[0091.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd14
	[0091.497] GetFileSizeEx (in: hFile=0xd14, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=7154) returned 1
	[0091.497] CreateFileMappingA (hFile=0xd14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1bf3, lpName=0x0) returned 0xd0c
	[0091.497] MapViewOfFile (hFileMappingObject=0xd0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.500] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.500] CloseHandle (hObject=0xd0c) returned 1
	[0091.500] GetCurrentThreadId () returned 0x1ad0
	[0091.500] FlushFileBuffers (hFile=0xd14) returned 1
	[0091.502] CloseHandle (hObject=0xd14) returned 1
	[0091.502] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099161.jpg") returned 97
	[0091.502] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099161.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099161.jpg")) returned 1
	[0091.503] free (_Block=0x3285888) 
	[0091.503] RtlExitUserThread (Status=0x0) 

Thread:
	id = 663
	os_tid = 0x1ad4

	[0091.503] _alloca_probe () returned 0x40328a
	[0091.504] GetCurrentThreadId () returned 0x1ad4
	[0091.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", dwFileAttributes=0x80) returned 1
	[0091.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd14
	[0091.504] GetFileSizeEx (in: hFile=0xd14, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=19656) returned 1
	[0091.504] CreateFileMappingA (hFile=0xd14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ccf, lpName=0x0) returned 0xd2c
	[0091.504] MapViewOfFile (hFileMappingObject=0xd2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.508] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.509] CloseHandle (hObject=0xd2c) returned 1
	[0091.509] GetCurrentThreadId () returned 0x1ad4
	[0091.509] FlushFileBuffers (hFile=0xd14) returned 1
	[0091.511] CloseHandle (hObject=0xd14) returned 1
	[0091.512] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099162.jpg") returned 97
	[0091.512] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099162.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099162.jpg")) returned 1
	[0091.512] free (_Block=0x3286890) 
	[0091.512] RtlExitUserThread (Status=0x0) 

Thread:
	id = 664
	os_tid = 0x1ad8

	[0091.557] _alloca_probe () returned 0x40328a
	[0091.558] GetCurrentThreadId () returned 0x1ad8
	[0091.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", dwFileAttributes=0x80) returned 1
	[0091.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0091.559] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=50490) returned 1
	[0091.559] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc543, lpName=0x0) returned 0xd04
	[0091.559] MapViewOfFile (hFileMappingObject=0xd04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0091.570] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0091.571] CloseHandle (hObject=0xd04) returned 1
	[0091.571] GetCurrentThreadId () returned 0x1ad8
	[0091.571] FlushFileBuffers (hFile=0xd2c) returned 1
	[0091.586] CloseHandle (hObject=0xd2c) returned 1
	[0091.587] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099165.jpg") returned 97
	[0091.587] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099165.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099165.jpg")) returned 1
	[0091.587] free (_Block=0x3287898) 
	[0091.587] RtlExitUserThread (Status=0x0) 

Thread:
	id = 665
	os_tid = 0x1adc

	[0091.566] _alloca_probe () returned 0x40328a
	[0091.566] GetCurrentThreadId () returned 0x1adc
	[0091.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", dwFileAttributes=0x80) returned 1
	[0091.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcf4
	[0091.567] GetFileSizeEx (in: hFile=0xcf4, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=64767) returned 1
	[0091.567] CreateFileMappingA (hFile=0xcf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfd0d, lpName=0x0) returned 0xcec
	[0091.567] MapViewOfFile (hFileMappingObject=0xcec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x540000
	[0091.585] UnmapViewOfFile (lpBaseAddress=0x540000) returned 1
	[0091.586] CloseHandle (hObject=0xcec) returned 1
	[0091.586] GetCurrentThreadId () returned 0x1adc
	[0091.586] FlushFileBuffers (hFile=0xcf4) returned 1
	[0091.589] CloseHandle (hObject=0xcf4) returned 1
	[0091.589] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099166.jpg") returned 97
	[0091.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099166.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099166.jpg")) returned 1
	[0091.590] free (_Block=0x3286890) 
	[0091.590] RtlExitUserThread (Status=0x0) 

Thread:
	id = 666
	os_tid = 0x1ae0

	[0091.591] _alloca_probe () returned 0x40328a
	[0091.592] GetCurrentThreadId () returned 0x1ae0
	[0091.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", dwFileAttributes=0x80) returned 1
	[0091.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0091.593] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=43949) returned 1
	[0091.593] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xabb9, lpName=0x0) returned 0xcec
	[0091.593] MapViewOfFile (hFileMappingObject=0xcec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.603] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.604] CloseHandle (hObject=0xcec) returned 1
	[0091.604] GetCurrentThreadId () returned 0x1ae0
	[0091.604] FlushFileBuffers (hFile=0xd2c) returned 1
	[0091.611] CloseHandle (hObject=0xd2c) returned 1
	[0091.611] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099167.jpg") returned 97
	[0091.611] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099167.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099167.jpg")) returned 1
	[0091.612] free (_Block=0x32888a0) 
	[0091.612] RtlExitUserThread (Status=0x0) 

Thread:
	id = 667
	os_tid = 0x1ae4

	[0091.600] _alloca_probe () returned 0x40328a
	[0091.600] GetCurrentThreadId () returned 0x1ae4
	[0091.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", dwFileAttributes=0x80) returned 1
	[0091.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xce4
	[0091.601] GetFileSizeEx (in: hFile=0xce4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=20179) returned 1
	[0091.601] CreateFileMappingA (hFile=0xce4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ed5, lpName=0x0) returned 0xcdc
	[0091.601] MapViewOfFile (hFileMappingObject=0xcdc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0091.608] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0091.608] CloseHandle (hObject=0xcdc) returned 1
	[0091.608] GetCurrentThreadId () returned 0x1ae4
	[0091.608] FlushFileBuffers (hFile=0xce4) returned 1
	[0091.612] CloseHandle (hObject=0xce4) returned 1
	[0091.613] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099168.jpg") returned 97
	[0091.613] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099168.jpg")) returned 1
	[0091.613] free (_Block=0x32898a8) 
	[0091.613] RtlExitUserThread (Status=0x0) 

Thread:
	id = 668
	os_tid = 0x1ae8

	[0091.617] _alloca_probe () returned 0x40328a
	[0091.617] GetCurrentThreadId () returned 0x1ae8
	[0091.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", dwFileAttributes=0x80) returned 1
	[0091.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0091.618] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=3282) returned 1
	[0091.618] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcd3, lpName=0x0) returned 0xcdc
	[0091.618] MapViewOfFile (hFileMappingObject=0xcdc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.620] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.620] CloseHandle (hObject=0xcdc) returned 1
	[0091.620] GetCurrentThreadId () returned 0x1ae8
	[0091.620] FlushFileBuffers (hFile=0xd2c) returned 1
	[0091.627] CloseHandle (hObject=0xd2c) returned 1
	[0091.628] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099185.jpg") returned 97
	[0091.628] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099185.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099185.jpg")) returned 1
	[0091.629] free (_Block=0x328c8c0) 
	[0091.629] RtlExitUserThread (Status=0x0) 

Thread:
	id = 669
	os_tid = 0x1aec

	[0091.622] _alloca_probe () returned 0x40328a
	[0091.622] GetCurrentThreadId () returned 0x1aec
	[0091.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", dwFileAttributes=0x80) returned 1
	[0091.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcec
	[0091.622] GetFileSizeEx (in: hFile=0xcec, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=16738) returned 1
	[0091.623] CreateFileMappingA (hFile=0xcec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4163, lpName=0x0) returned 0xcd4
	[0091.623] MapViewOfFile (hFileMappingObject=0xcd4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.627] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.627] CloseHandle (hObject=0xcd4) returned 1
	[0091.627] GetCurrentThreadId () returned 0x1aec
	[0091.627] FlushFileBuffers (hFile=0xcec) returned 1
	[0091.630] CloseHandle (hObject=0xcec) returned 1
	[0091.630] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099186.jpg") returned 97
	[0091.630] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099186.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099186.jpg")) returned 1
	[0091.631] free (_Block=0x32888a0) 
	[0091.631] RtlExitUserThread (Status=0x0) 

Thread:
	id = 670
	os_tid = 0x1af0

	[0091.632] _alloca_probe () returned 0x40328a
	[0091.633] GetCurrentThreadId () returned 0x1af0
	[0091.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", dwFileAttributes=0x80) returned 1
	[0091.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0091.633] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=24528) returned 1
	[0091.633] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5fd0, lpName=0x0) returned 0xcd4
	[0091.634] MapViewOfFile (hFileMappingObject=0xcd4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.638] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.638] CloseHandle (hObject=0xcd4) returned 1
	[0091.639] GetCurrentThreadId () returned 0x1af0
	[0091.639] FlushFileBuffers (hFile=0xd2c) returned 1
	[0091.644] CloseHandle (hObject=0xd2c) returned 1
	[0091.645] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099187.jpg") returned 97
	[0091.645] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099187.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099187.jpg")) returned 1
	[0091.645] free (_Block=0x32898a8) 
	[0091.645] RtlExitUserThread (Status=0x0) 

Thread:
	id = 671
	os_tid = 0x1af4

	[0091.640] _alloca_probe () returned 0x40328a
	[0091.640] GetCurrentThreadId () returned 0x1af4
	[0091.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", dwFileAttributes=0x80) returned 1
	[0091.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xccc
	[0091.641] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=9080) returned 1
	[0091.641] CreateFileMappingA (hFile=0xccc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x237f, lpName=0x0) returned 0xcc4
	[0091.641] MapViewOfFile (hFileMappingObject=0xcc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.644] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.644] CloseHandle (hObject=0xcc4) returned 1
	[0091.644] GetCurrentThreadId () returned 0x1af4
	[0091.644] FlushFileBuffers (hFile=0xccc) returned 1
	[0091.647] CloseHandle (hObject=0xccc) returned 1
	[0091.647] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099188.jpg") returned 97
	[0091.647] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099188.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099188.jpg")) returned 1
	[0091.648] free (_Block=0x328c8c0) 
	[0091.648] RtlExitUserThread (Status=0x0) 

Thread:
	id = 672
	os_tid = 0x1af8

	[0091.649] _alloca_probe () returned 0x40328a
	[0091.649] GetCurrentThreadId () returned 0x1af8
	[0091.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", dwFileAttributes=0x80) returned 1
	[0091.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd2c
	[0091.650] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8076) returned 1
	[0091.650] CreateFileMappingA (hFile=0xd2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f97, lpName=0x0) returned 0xcc4
	[0091.650] MapViewOfFile (hFileMappingObject=0xcc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.652] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.652] CloseHandle (hObject=0xcc4) returned 1
	[0091.652] GetCurrentThreadId () returned 0x1af8
	[0091.652] FlushFileBuffers (hFile=0xd2c) returned 1
	[0091.657] CloseHandle (hObject=0xd2c) returned 1
	[0091.657] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099189.jpg") returned 97
	[0091.657] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099189.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099189.jpg")) returned 1
	[0091.658] free (_Block=0x3286890) 
	[0091.658] RtlExitUserThread (Status=0x0) 

Thread:
	id = 673
	os_tid = 0x1afc

	[0091.654] _alloca_probe () returned 0x40328a
	[0091.655] GetCurrentThreadId () returned 0x1afc
	[0091.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", dwFileAttributes=0x80) returned 1
	[0091.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcbc
	[0091.656] GetFileSizeEx (in: hFile=0xcbc, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=43892) returned 1
	[0091.656] CreateFileMappingA (hFile=0xcbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xab77, lpName=0x0) returned 0xcb4
	[0091.656] MapViewOfFile (hFileMappingObject=0xcb4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.666] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.666] CloseHandle (hObject=0xcb4) returned 1
	[0091.666] GetCurrentThreadId () returned 0x1afc
	[0091.666] FlushFileBuffers (hFile=0xcbc) returned 1
	[0091.760] CloseHandle (hObject=0xcbc) returned 1
	[0091.760] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099190.jpg") returned 97
	[0091.760] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099190.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099190.jpg")) returned 1
	[0091.761] free (_Block=0x32888a0) 
	[0091.761] RtlExitUserThread (Status=0x0) 

Thread:
	id = 674
	os_tid = 0x1b00

	[0091.763] _alloca_probe () returned 0x40328a
	[0091.763] GetCurrentThreadId () returned 0x1b00
	[0091.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", dwFileAttributes=0x80) returned 1
	[0091.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcb4
	[0091.764] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=62367) returned 1
	[0091.764] CreateFileMappingA (hFile=0xcb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf3ad, lpName=0x0) returned 0xd2c
	[0091.764] MapViewOfFile (hFileMappingObject=0xd2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.778] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.778] CloseHandle (hObject=0xd2c) returned 1
	[0091.778] GetCurrentThreadId () returned 0x1b00
	[0091.778] FlushFileBuffers (hFile=0xcb4) returned 1
	[0091.785] CloseHandle (hObject=0xcb4) returned 1
	[0091.785] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099191.jpg") returned 97
	[0091.785] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099191.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099191.jpg")) returned 1
	[0091.786] free (_Block=0x32898a8) 
	[0091.786] RtlExitUserThread (Status=0x0) 

Thread:
	id = 675
	os_tid = 0x1b04

	[0091.771] _alloca_probe () returned 0x40328a
	[0091.772] GetCurrentThreadId () returned 0x1b04
	[0091.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", dwFileAttributes=0x80) returned 1
	[0091.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdb4
	[0091.772] GetFileSizeEx (in: hFile=0xdb4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=17964) returned 1
	[0091.772] CreateFileMappingA (hFile=0xdb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4637, lpName=0x0) returned 0xdb8
	[0091.772] MapViewOfFile (hFileMappingObject=0xdb8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0091.782] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0091.783] CloseHandle (hObject=0xdb8) returned 1
	[0091.783] GetCurrentThreadId () returned 0x1b04
	[0091.783] FlushFileBuffers (hFile=0xdb4) returned 1
	[0091.787] CloseHandle (hObject=0xdb4) returned 1
	[0091.787] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099192.gif") returned 97
	[0091.787] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099192.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099192.gif")) returned 1
	[0091.788] free (_Block=0x3286890) 
	[0091.788] RtlExitUserThread (Status=0x0) 

Thread:
	id = 676
	os_tid = 0x1b08

	[0091.789] _alloca_probe () returned 0x40328a
	[0091.790] GetCurrentThreadId () returned 0x1b08
	[0091.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", dwFileAttributes=0x80) returned 1
	[0091.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcb4
	[0091.790] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=35546) returned 1
	[0091.790] CreateFileMappingA (hFile=0xcb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8ae3, lpName=0x0) returned 0xdb8
	[0091.790] MapViewOfFile (hFileMappingObject=0xdb8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.797] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.798] CloseHandle (hObject=0xdb8) returned 1
	[0091.798] GetCurrentThreadId () returned 0x1b08
	[0091.798] FlushFileBuffers (hFile=0xcb4) returned 1
	[0091.800] CloseHandle (hObject=0xcb4) returned 1
	[0091.801] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099193.gif") returned 97
	[0091.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099193.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099193.gif")) returned 1
	[0091.801] free (_Block=0x3285888) 
	[0091.801] RtlExitUserThread (Status=0x0) 

Thread:
	id = 677
	os_tid = 0x1b0c

	[0091.845] _alloca_probe () returned 0x40328a
	[0091.845] GetCurrentThreadId () returned 0x1b0c
	[0091.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", dwFileAttributes=0x80) returned 1
	[0091.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdb8
	[0091.846] GetFileSizeEx (in: hFile=0xdb8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=25265) returned 1
	[0091.846] CreateFileMappingA (hFile=0xdb8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x62b1, lpName=0x0) returned 0xd2c
	[0091.846] MapViewOfFile (hFileMappingObject=0xd2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0091.851] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0091.851] CloseHandle (hObject=0xd2c) returned 1
	[0091.851] GetCurrentThreadId () returned 0x1b0c
	[0091.851] FlushFileBuffers (hFile=0xdb8) returned 1
	[0091.855] CloseHandle (hObject=0xdb8) returned 1
	[0091.855] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099194.gif") returned 97
	[0091.855] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099194.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099194.gif")) returned 1
	[0091.856] free (_Block=0x32888a0) 
	[0091.856] RtlExitUserThread (Status=0x0) 

Thread:
	id = 678
	os_tid = 0x1b10

	[0091.852] _alloca_probe () returned 0x40328a
	[0091.853] GetCurrentThreadId () returned 0x1b10
	[0091.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", dwFileAttributes=0x80) returned 1
	[0091.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdbc
	[0091.855] GetFileSizeEx (in: hFile=0xdbc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=19923) returned 1
	[0091.855] CreateFileMappingA (hFile=0xdbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4dd5, lpName=0x0) returned 0xdc0
	[0091.855] MapViewOfFile (hFileMappingObject=0xdc0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.860] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.860] CloseHandle (hObject=0xdc0) returned 1
	[0091.860] GetCurrentThreadId () returned 0x1b10
	[0091.860] FlushFileBuffers (hFile=0xdbc) returned 1
	[0091.867] CloseHandle (hObject=0xdbc) returned 1
	[0091.868] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099195.gif") returned 97
	[0091.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099195.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099195.gif")) returned 1
	[0091.871] free (_Block=0x3285888) 
	[0091.871] RtlExitUserThread (Status=0x0) 

Thread:
	id = 679
	os_tid = 0x1b14

	[0091.862] _alloca_probe () returned 0x40328a
	[0091.862] GetCurrentThreadId () returned 0x1b14
	[0091.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", dwFileAttributes=0x80) returned 1
	[0091.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdb8
	[0091.863] GetFileSizeEx (in: hFile=0xdb8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=14337) returned 1
	[0091.863] CreateFileMappingA (hFile=0xdb8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3801, lpName=0x0) returned 0xdc4
	[0091.863] MapViewOfFile (hFileMappingObject=0xdc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.867] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.867] CloseHandle (hObject=0xdc4) returned 1
	[0091.867] GetCurrentThreadId () returned 0x1b14
	[0091.867] FlushFileBuffers (hFile=0xdb8) returned 1
	[0091.874] CloseHandle (hObject=0xdb8) returned 1
	[0091.875] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099196.gif") returned 97
	[0091.875] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099196.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099196.gif")) returned 1
	[0091.875] free (_Block=0x3286890) 
	[0091.875] RtlExitUserThread (Status=0x0) 

Thread:
	id = 680
	os_tid = 0x1b18

	[0091.878] _alloca_probe () returned 0x40328a
	[0091.878] GetCurrentThreadId () returned 0x1b18
	[0091.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", dwFileAttributes=0x80) returned 1
	[0091.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdbc
	[0091.878] GetFileSizeEx (in: hFile=0xdbc, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=10898) returned 1
	[0091.879] CreateFileMappingA (hFile=0xdbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2a93, lpName=0x0) returned 0xdc4
	[0091.879] MapViewOfFile (hFileMappingObject=0xdc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.881] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.881] CloseHandle (hObject=0xdc4) returned 1
	[0091.881] GetCurrentThreadId () returned 0x1b18
	[0091.881] FlushFileBuffers (hFile=0xdbc) returned 1
	[0091.884] CloseHandle (hObject=0xdbc) returned 1
	[0091.884] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099197.gif") returned 97
	[0091.884] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099197.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099197.gif")) returned 1
	[0091.885] free (_Block=0x3286890) 
	[0091.885] RtlExitUserThread (Status=0x0) 

Thread:
	id = 681
	os_tid = 0x1b1c

	[0091.887] _alloca_probe () returned 0x40328a
	[0091.887] GetCurrentThreadId () returned 0x1b1c
	[0091.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", dwFileAttributes=0x80) returned 1
	[0091.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc4
	[0091.887] GetFileSizeEx (in: hFile=0xdc4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=5259) returned 1
	[0091.888] CreateFileMappingA (hFile=0xdc4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1495, lpName=0x0) returned 0xdc8
	[0091.888] MapViewOfFile (hFileMappingObject=0xdc8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0091.889] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0091.889] CloseHandle (hObject=0xdc8) returned 1
	[0091.889] GetCurrentThreadId () returned 0x1b1c
	[0091.889] FlushFileBuffers (hFile=0xdc4) returned 1
	[0091.892] CloseHandle (hObject=0xdc4) returned 1
	[0091.892] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099198.gif") returned 97
	[0091.892] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099198.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099198.gif")) returned 1
	[0091.893] free (_Block=0x3285888) 
	[0091.893] RtlExitUserThread (Status=0x0) 

Thread:
	id = 682
	os_tid = 0x1b20

	[0092.298] _alloca_probe () returned 0x40328a
	[0092.298] GetCurrentThreadId () returned 0x1b20
	[0092.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", dwFileAttributes=0x80) returned 1
	[0092.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc8
	[0092.300] GetFileSizeEx (in: hFile=0xdc8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=33975) returned 1
	[0092.300] CreateFileMappingA (hFile=0xdc8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x84bd, lpName=0x0) returned 0xdcc
	[0092.300] MapViewOfFile (hFileMappingObject=0xdcc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.307] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.308] CloseHandle (hObject=0xdcc) returned 1
	[0092.308] GetCurrentThreadId () returned 0x1b20
	[0092.308] FlushFileBuffers (hFile=0xdc8) returned 1
	[0092.310] CloseHandle (hObject=0xdc8) returned 1
	[0092.311] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099199.gif") returned 97
	[0092.311] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099199.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099199.gif")) returned 1
	[0092.311] free (_Block=0x3286890) 
	[0092.311] RtlExitUserThread (Status=0x0) 

Thread:
	id = 683
	os_tid = 0x1b24

	[0092.355] _alloca_probe () returned 0x40328a
	[0092.355] GetCurrentThreadId () returned 0x1b24
	[0092.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", dwFileAttributes=0x80) returned 1
	[0092.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdd0
	[0092.356] GetFileSizeEx (in: hFile=0xdd0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=16543) returned 1
	[0092.356] CreateFileMappingA (hFile=0xdd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40ad, lpName=0x0) returned 0xdd4
	[0092.356] MapViewOfFile (hFileMappingObject=0xdd4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0092.360] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0092.360] CloseHandle (hObject=0xdd4) returned 1
	[0092.360] GetCurrentThreadId () returned 0x1b24
	[0092.360] FlushFileBuffers (hFile=0xdd0) returned 1
	[0092.362] CloseHandle (hObject=0xdd0) returned 1
	[0092.363] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099200.gif") returned 97
	[0092.363] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099200.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099200.gif")) returned 1
	[0092.363] free (_Block=0x32898a8) 
	[0092.363] RtlExitUserThread (Status=0x0) 

Thread:
	id = 684
	os_tid = 0x1b28

	[0092.365] _alloca_probe () returned 0x40328a
	[0092.366] GetCurrentThreadId () returned 0x1b28
	[0092.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", dwFileAttributes=0x80) returned 1
	[0092.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdd4
	[0092.366] GetFileSizeEx (in: hFile=0xdd4, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=51401) returned 1
	[0092.366] CreateFileMappingA (hFile=0xdd4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc8d1, lpName=0x0) returned 0xdd8
	[0092.366] MapViewOfFile (hFileMappingObject=0xdd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.384] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.384] CloseHandle (hObject=0xdd8) returned 1
	[0092.385] GetCurrentThreadId () returned 0x1b28
	[0092.385] FlushFileBuffers (hFile=0xdd4) returned 1
	[0092.389] CloseHandle (hObject=0xdd4) returned 1
	[0092.389] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099201.gif") returned 97
	[0092.389] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099201.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099201.gif")) returned 1
	[0092.390] free (_Block=0x3286890) 
	[0092.390] RtlExitUserThread (Status=0x0) 

Thread:
	id = 685
	os_tid = 0x1b2c

	[0092.369] _alloca_probe () returned 0x40328a
	[0092.369] GetCurrentThreadId () returned 0x1b2c
	[0092.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", dwFileAttributes=0x80) returned 1
	[0092.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xde0
	[0092.370] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=4967) returned 1
	[0092.370] CreateFileMappingA (hFile=0xde0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x136d, lpName=0x0) returned 0xde4
	[0092.370] MapViewOfFile (hFileMappingObject=0xde4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0092.374] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0092.380] CloseHandle (hObject=0xde4) returned 1
	[0092.380] GetCurrentThreadId () returned 0x1b2c
	[0092.380] FlushFileBuffers (hFile=0xde0) returned 1
	[0092.387] CloseHandle (hObject=0xde0) returned 1
	[0092.387] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099202.gif") returned 97
	[0092.387] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099202.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099202.gif")) returned 1
	[0092.388] free (_Block=0x3285888) 
	[0092.388] RtlExitUserThread (Status=0x0) 

Thread:
	id = 686
	os_tid = 0x1b30

	[0092.439] _alloca_probe () returned 0x40328a
	[0092.439] GetCurrentThreadId () returned 0x1b30
	[0092.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", dwFileAttributes=0x80) returned 1
	[0092.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xde0
	[0092.440] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=3904) returned 1
	[0092.440] CreateFileMappingA (hFile=0xde0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf40, lpName=0x0) returned 0xdd8
	[0092.440] MapViewOfFile (hFileMappingObject=0xdd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0092.441] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0092.441] CloseHandle (hObject=0xdd8) returned 1
	[0092.441] GetCurrentThreadId () returned 0x1b30
	[0092.441] FlushFileBuffers (hFile=0xde0) returned 1
	[0092.444] CloseHandle (hObject=0xde0) returned 1
	[0092.444] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099203.gif") returned 97
	[0092.444] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099203.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099203.gif")) returned 1
	[0092.445] free (_Block=0x328e8d0) 
	[0092.445] RtlExitUserThread (Status=0x0) 

Thread:
	id = 687
	os_tid = 0x1b34

	[0092.453] _alloca_probe () returned 0x40328a
	[0092.453] GetCurrentThreadId () returned 0x1b34
	[0092.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", dwFileAttributes=0x80) returned 1
	[0092.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdd8
	[0092.455] GetFileSizeEx (in: hFile=0xdd8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=78840) returned 1
	[0092.455] CreateFileMappingA (hFile=0xdd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x133ff, lpName=0x0) returned 0xde4
	[0092.455] MapViewOfFile (hFileMappingObject=0xde4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.470] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.470] CloseHandle (hObject=0xde4) returned 1
	[0092.470] GetCurrentThreadId () returned 0x1b34
	[0092.470] FlushFileBuffers (hFile=0xdd8) returned 1
	[0092.476] CloseHandle (hObject=0xdd8) returned 1
	[0092.476] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101856.bmp") returned 97
	[0092.476] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101856.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101856.bmp")) returned 1
	[0092.477] free (_Block=0x328c8c0) 
	[0092.477] RtlExitUserThread (Status=0x0) 

Thread:
	id = 688
	os_tid = 0x1b38

	[0092.473] _alloca_probe () returned 0x40328a
	[0092.474] GetCurrentThreadId () returned 0x1b38
	[0092.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", dwFileAttributes=0x80) returned 1
	[0092.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xde4
	[0092.475] GetFileSizeEx (in: hFile=0xde4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=32184) returned 1
	[0092.476] CreateFileMappingA (hFile=0xde4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xdec
	[0092.476] MapViewOfFile (hFileMappingObject=0xdec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.483] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.483] CloseHandle (hObject=0xdec) returned 1
	[0092.483] GetCurrentThreadId () returned 0x1b38
	[0092.483] FlushFileBuffers (hFile=0xde4) returned 1
	[0092.486] CloseHandle (hObject=0xde4) returned 1
	[0092.486] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101857.bmp") returned 97
	[0092.486] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101857.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101857.bmp")) returned 1
	[0092.487] free (_Block=0x3285888) 
	[0092.487] RtlExitUserThread (Status=0x0) 

Thread:
	id = 689
	os_tid = 0x1b3c

	[0092.488] _alloca_probe () returned 0x40328a
	[0092.489] GetCurrentThreadId () returned 0x1b3c
	[0092.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", dwFileAttributes=0x80) returned 1
	[0092.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdec
	[0092.489] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=32184) returned 1
	[0092.489] CreateFileMappingA (hFile=0xdec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xdd8
	[0092.489] MapViewOfFile (hFileMappingObject=0xdd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.495] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.496] CloseHandle (hObject=0xdd8) returned 1
	[0092.496] GetCurrentThreadId () returned 0x1b3c
	[0092.496] FlushFileBuffers (hFile=0xdec) returned 1
	[0092.499] CloseHandle (hObject=0xdec) returned 1
	[0092.500] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101858.bmp") returned 97
	[0092.500] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101858.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101858.bmp")) returned 1
	[0092.501] free (_Block=0x3287898) 
	[0092.501] RtlExitUserThread (Status=0x0) 

Thread:
	id = 690
	os_tid = 0x1b40

	[0092.498] _alloca_probe () returned 0x40328a
	[0092.498] GetCurrentThreadId () returned 0x1b40
	[0092.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", dwFileAttributes=0x80) returned 1
	[0092.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdf0
	[0092.499] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=31968) returned 1
	[0092.499] CreateFileMappingA (hFile=0xdf0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xdf4
	[0092.499] MapViewOfFile (hFileMappingObject=0xdf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.506] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.507] CloseHandle (hObject=0xdf4) returned 1
	[0092.507] GetCurrentThreadId () returned 0x1b40
	[0092.507] FlushFileBuffers (hFile=0xdf0) returned 1
	[0092.669] CloseHandle (hObject=0xdf0) returned 1
	[0092.669] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101859.bmp") returned 97
	[0092.669] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101859.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101859.bmp")) returned 1
	[0092.670] free (_Block=0x32888a0) 
	[0092.670] RtlExitUserThread (Status=0x0) 

Thread:
	id = 691
	os_tid = 0x1b44

	[0092.509] _alloca_probe () returned 0x40328a
	[0092.509] GetCurrentThreadId () returned 0x1b44
	[0092.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", dwFileAttributes=0x80) returned 1
	[0092.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdec
	[0092.510] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=32184) returned 1
	[0092.510] CreateFileMappingA (hFile=0xdec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xdf8
	[0092.511] MapViewOfFile (hFileMappingObject=0xdf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.517] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.517] CloseHandle (hObject=0xdf8) returned 1
	[0092.517] GetCurrentThreadId () returned 0x1b44
	[0092.517] FlushFileBuffers (hFile=0xdec) returned 1
	[0092.520] CloseHandle (hObject=0xdec) returned 1
	[0092.520] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101860.bmp") returned 97
	[0092.520] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101860.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101860.bmp")) returned 1
	[0092.521] free (_Block=0x3287898) 
	[0092.521] RtlExitUserThread (Status=0x0) 

Thread:
	id = 692
	os_tid = 0x1b48

	[0092.621] _alloca_probe () returned 0x40328a
	[0092.622] GetCurrentThreadId () returned 0x1b48
	[0092.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", dwFileAttributes=0x80) returned 1
	[0092.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdf8
	[0092.622] GetFileSizeEx (in: hFile=0xdf8, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=32184) returned 1
	[0092.622] CreateFileMappingA (hFile=0xdf8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xdfc
	[0092.622] MapViewOfFile (hFileMappingObject=0xdfc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0092.629] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0092.629] CloseHandle (hObject=0xdfc) returned 1
	[0092.629] GetCurrentThreadId () returned 0x1b48
	[0092.629] FlushFileBuffers (hFile=0xdf8) returned 1
	[0092.673] CloseHandle (hObject=0xdf8) returned 1
	[0092.673] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101861.bmp") returned 97
	[0092.673] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101861.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101861.bmp")) returned 1
	[0092.674] free (_Block=0x328c8c0) 
	[0092.674] RtlExitUserThread (Status=0x0) 

Thread:
	id = 693
	os_tid = 0x1b50

	[0092.677] _alloca_probe () returned 0x40328a
	[0092.677] GetCurrentThreadId () returned 0x1b50
	[0092.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", dwFileAttributes=0x80) returned 1
	[0092.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdf0
	[0092.678] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=32184) returned 1
	[0092.678] CreateFileMappingA (hFile=0xdf0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xdfc
	[0092.678] MapViewOfFile (hFileMappingObject=0xdfc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0092.684] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0092.684] CloseHandle (hObject=0xdfc) returned 1
	[0092.684] GetCurrentThreadId () returned 0x1b50
	[0092.684] FlushFileBuffers (hFile=0xdf0) returned 1
	[0092.695] CloseHandle (hObject=0xdf0) returned 1
	[0092.696] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101862.bmp") returned 97
	[0092.696] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101862.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101862.bmp")) returned 1
	[0092.696] free (_Block=0x3285888) 
	[0092.696] RtlExitUserThread (Status=0x0) 

Thread:
	id = 694
	os_tid = 0x1b54

	[0092.686] _alloca_probe () returned 0x40328a
	[0092.686] GetCurrentThreadId () returned 0x1b54
	[0092.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", dwFileAttributes=0x80) returned 1
	[0092.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe00
	[0092.687] GetFileSizeEx (in: hFile=0xe00, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=32184) returned 1
	[0092.687] CreateFileMappingA (hFile=0xe00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xe04
	[0092.687] MapViewOfFile (hFileMappingObject=0xe04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2490000
	[0092.694] UnmapViewOfFile (lpBaseAddress=0x2490000) returned 1
	[0092.694] CloseHandle (hObject=0xe04) returned 1
	[0092.695] GetCurrentThreadId () returned 0x1b54
	[0092.695] FlushFileBuffers (hFile=0xe00) returned 1
	[0092.744] CloseHandle (hObject=0xe00) returned 1
	[0092.744] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101863.bmp") returned 97
	[0092.744] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101863.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101863.bmp")) returned 1
	[0092.745] free (_Block=0x328c8c0) 
	[0092.745] RtlExitUserThread (Status=0x0) 

Thread:
	id = 695
	os_tid = 0x1b58

	[0092.747] _alloca_probe () returned 0x40328a
	[0092.748] GetCurrentThreadId () returned 0x1b58
	[0092.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", dwFileAttributes=0x80) returned 1
	[0092.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdf0
	[0092.748] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=31968) returned 1
	[0092.748] CreateFileMappingA (hFile=0xdf0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xe04
	[0092.748] MapViewOfFile (hFileMappingObject=0xe04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.754] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.755] CloseHandle (hObject=0xe04) returned 1
	[0092.755] GetCurrentThreadId () returned 0x1b58
	[0092.755] FlushFileBuffers (hFile=0xdf0) returned 1
	[0092.757] CloseHandle (hObject=0xdf0) returned 1
	[0092.757] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101864.bmp") returned 97
	[0092.757] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101864.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101864.bmp")) returned 1
	[0092.758] free (_Block=0x3287898) 
	[0092.758] RtlExitUserThread (Status=0x0) 

Thread:
	id = 696
	os_tid = 0x1b5c

	[0092.807] _alloca_probe () returned 0x40328a
	[0092.808] GetCurrentThreadId () returned 0x1b5c
	[0092.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", dwFileAttributes=0x80) returned 1
	[0092.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe04
	[0092.809] GetFileSizeEx (in: hFile=0xe04, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=32184) returned 1
	[0092.809] CreateFileMappingA (hFile=0xe04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xe08
	[0092.809] MapViewOfFile (hFileMappingObject=0xe08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0092.815] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0092.816] CloseHandle (hObject=0xe08) returned 1
	[0092.816] GetCurrentThreadId () returned 0x1b5c
	[0092.816] FlushFileBuffers (hFile=0xe04) returned 1
	[0092.818] CloseHandle (hObject=0xe04) returned 1
	[0092.818] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101865.bmp") returned 97
	[0092.818] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101865.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101865.bmp")) returned 1
	[0092.819] free (_Block=0x328c8c0) 
	[0092.819] RtlExitUserThread (Status=0x0) 

Thread:
	id = 697
	os_tid = 0x1b60

	[0092.870] _alloca_probe () returned 0x40328a
	[0092.871] GetCurrentThreadId () returned 0x1b60
	[0092.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", dwFileAttributes=0x80) returned 1
	[0092.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe08
	[0092.872] GetFileSizeEx (in: hFile=0xe08, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=32184) returned 1
	[0092.872] CreateFileMappingA (hFile=0xe08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xe0c
	[0092.872] MapViewOfFile (hFileMappingObject=0xe0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0092.878] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0092.878] CloseHandle (hObject=0xe0c) returned 1
	[0092.878] GetCurrentThreadId () returned 0x1b60
	[0092.879] FlushFileBuffers (hFile=0xe08) returned 1
	[0092.889] CloseHandle (hObject=0xe08) returned 1
	[0092.890] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101866.bmp") returned 97
	[0092.890] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101866.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101866.bmp")) returned 1
	[0092.890] free (_Block=0x3285888) 
	[0092.890] RtlExitUserThread (Status=0x0) 

Thread:
	id = 698
	os_tid = 0x1b64

	[0092.880] _alloca_probe () returned 0x40328a
	[0092.881] GetCurrentThreadId () returned 0x1b64
	[0092.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", dwFileAttributes=0x80) returned 1
	[0092.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe10
	[0092.881] GetFileSizeEx (in: hFile=0xe10, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=32616) returned 1
	[0092.881] CreateFileMappingA (hFile=0xe10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7f6f, lpName=0x0) returned 0xe14
	[0092.881] MapViewOfFile (hFileMappingObject=0xe14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2490000
	[0092.888] UnmapViewOfFile (lpBaseAddress=0x2490000) returned 1
	[0092.889] CloseHandle (hObject=0xe14) returned 1
	[0092.889] GetCurrentThreadId () returned 0x1b64
	[0092.889] FlushFileBuffers (hFile=0xe10) returned 1
	[0092.892] CloseHandle (hObject=0xe10) returned 1
	[0092.892] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101867.bmp") returned 97
	[0092.893] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101867.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101867.bmp")) returned 1
	[0092.893] free (_Block=0x328c8c0) 
	[0092.893] RtlExitUserThread (Status=0x0) 

Thread:
	id = 699
	os_tid = 0x1b68

	[0092.899] _alloca_probe () returned 0x40328a
	[0092.899] GetCurrentThreadId () returned 0x1b68
	[0092.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", dwFileAttributes=0x80) returned 1
	[0092.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe08
	[0092.900] GetFileSizeEx (in: hFile=0xe08, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=40231) returned 1
	[0092.900] CreateFileMappingA (hFile=0xe08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9d2d, lpName=0x0) returned 0xe14
	[0092.900] MapViewOfFile (hFileMappingObject=0xe14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0092.909] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0092.909] CloseHandle (hObject=0xe14) returned 1
	[0092.909] GetCurrentThreadId () returned 0x1b68
	[0092.909] FlushFileBuffers (hFile=0xe08) returned 1
	[0092.912] CloseHandle (hObject=0xe08) returned 1
	[0092.912] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0144773.jpg") returned 97
	[0092.912] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0144773.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0144773.jpg")) returned 1
	[0092.913] free (_Block=0x328c8c0) 
	[0092.913] RtlExitUserThread (Status=0x0) 

Thread:
	id = 700
	os_tid = 0x1b78

	[0093.308] _alloca_probe () returned 0x40328a
	[0093.309] GetCurrentThreadId () returned 0x1b78
	[0093.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", dwFileAttributes=0x80) returned 1
	[0093.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe14
	[0093.310] GetFileSizeEx (in: hFile=0xe14, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=33657) returned 1
	[0093.310] CreateFileMappingA (hFile=0xe14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8381, lpName=0x0) returned 0xe18
	[0093.310] MapViewOfFile (hFileMappingObject=0xe18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0093.317] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0093.318] CloseHandle (hObject=0xe18) returned 1
	[0093.318] GetCurrentThreadId () returned 0x1b78
	[0093.318] FlushFileBuffers (hFile=0xe14) returned 1
	[0093.322] CloseHandle (hObject=0xe14) returned 1
	[0093.322] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145168.jpg") returned 97
	[0093.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145168.jpg")) returned 1
	[0093.323] free (_Block=0x3286890) 
	[0093.323] RtlExitUserThread (Status=0x0) 

Thread:
	id = 701
	os_tid = 0x1b7c

	[0093.320] _alloca_probe () returned 0x40328a
	[0093.321] GetCurrentThreadId () returned 0x1b7c
	[0093.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", dwFileAttributes=0x80) returned 1
	[0093.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe1c
	[0093.321] GetFileSizeEx (in: hFile=0xe1c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=61633) returned 1
	[0093.321] CreateFileMappingA (hFile=0xe1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf0c1, lpName=0x0) returned 0xe20
	[0093.321] MapViewOfFile (hFileMappingObject=0xe20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0093.334] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0093.334] CloseHandle (hObject=0xe20) returned 1
	[0093.334] GetCurrentThreadId () returned 0x1b7c
	[0093.334] FlushFileBuffers (hFile=0xe1c) returned 1
	[0093.337] CloseHandle (hObject=0xe1c) returned 1
	[0093.337] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145212.jpg") returned 97
	[0093.337] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145212.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145212.jpg")) returned 1
	[0093.338] free (_Block=0x32888a0) 
	[0093.338] RtlExitUserThread (Status=0x0) 

Thread:
	id = 702
	os_tid = 0x1b80

	[0093.339] _alloca_probe () returned 0x40328a
	[0093.339] GetCurrentThreadId () returned 0x1b80
	[0093.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", dwFileAttributes=0x80) returned 1
	[0093.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe20
	[0093.340] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=49238) returned 1
	[0093.340] CreateFileMappingA (hFile=0xe20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc05b, lpName=0x0) returned 0xe14
	[0093.340] MapViewOfFile (hFileMappingObject=0xe14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0093.349] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0093.350] CloseHandle (hObject=0xe14) returned 1
	[0093.350] GetCurrentThreadId () returned 0x1b80
	[0093.350] FlushFileBuffers (hFile=0xe20) returned 1
	[0093.358] CloseHandle (hObject=0xe20) returned 1
	[0093.358] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145272.jpg") returned 97
	[0093.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145272.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145272.jpg")) returned 1
	[0093.359] free (_Block=0x328c8c0) 
	[0093.359] RtlExitUserThread (Status=0x0) 

Thread:
	id = 703
	os_tid = 0x1b84

	[0093.351] _alloca_probe () returned 0x40328a
	[0093.352] GetCurrentThreadId () returned 0x1b84
	[0093.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", dwFileAttributes=0x80) returned 1
	[0093.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe14
	[0093.352] GetFileSizeEx (in: hFile=0xe14, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=21125) returned 1
	[0093.352] CreateFileMappingA (hFile=0xe14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5289, lpName=0x0) returned 0xe28
	[0093.352] MapViewOfFile (hFileMappingObject=0xe28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0093.357] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0093.357] CloseHandle (hObject=0xe28) returned 1
	[0093.357] GetCurrentThreadId () returned 0x1b84
	[0093.357] FlushFileBuffers (hFile=0xe14) returned 1
	[0093.361] CloseHandle (hObject=0xe14) returned 1
	[0093.361] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145361.jpg") returned 97
	[0093.361] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145361.jpg")) returned 1
	[0093.362] free (_Block=0x32898a8) 
	[0093.362] RtlExitUserThread (Status=0x0) 

Thread:
	id = 704
	os_tid = 0x1b88

	[0093.363] _alloca_probe () returned 0x40328a
	[0093.363] GetCurrentThreadId () returned 0x1b88
	[0093.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", dwFileAttributes=0x80) returned 1
	[0093.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe20
	[0093.368] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=17867) returned 1
	[0093.368] CreateFileMappingA (hFile=0xe20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x45d5, lpName=0x0) returned 0xe28
	[0093.368] MapViewOfFile (hFileMappingObject=0xe28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0093.372] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0093.372] CloseHandle (hObject=0xe28) returned 1
	[0093.372] GetCurrentThreadId () returned 0x1b88
	[0093.372] FlushFileBuffers (hFile=0xe20) returned 1
	[0093.375] CloseHandle (hObject=0xe20) returned 1
	[0093.375] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145373.jpg") returned 97
	[0093.375] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145373.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145373.jpg")) returned 1
	[0093.376] free (_Block=0x328c8c0) 
	[0093.376] RtlExitUserThread (Status=0x0) 

Thread:
	id = 705
	os_tid = 0x1b8c

	[0093.518] _alloca_probe () returned 0x40328a
	[0093.518] GetCurrentThreadId () returned 0x1b8c
	[0093.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", dwFileAttributes=0x80) returned 1
	[0093.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe28
	[0093.519] GetFileSizeEx (in: hFile=0xe28, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=31850) returned 1
	[0093.519] CreateFileMappingA (hFile=0xe28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c73, lpName=0x0) returned 0xe2c
	[0093.519] MapViewOfFile (hFileMappingObject=0xe2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0093.526] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0093.526] CloseHandle (hObject=0xe2c) returned 1
	[0093.526] GetCurrentThreadId () returned 0x1b8c
	[0093.526] FlushFileBuffers (hFile=0xe28) returned 1
	[0093.530] CloseHandle (hObject=0xe28) returned 1
	[0093.530] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145669.jpg") returned 97
	[0093.530] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145669.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145669.jpg")) returned 1
	[0093.531] free (_Block=0x32888a0) 
	[0093.531] RtlExitUserThread (Status=0x0) 

Thread:
	id = 706
	os_tid = 0x1b94

	[0093.594] _alloca_probe () returned 0x40328a
	[0093.594] GetCurrentThreadId () returned 0x1b94
	[0093.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", dwFileAttributes=0x80) returned 1
	[0093.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe2c
	[0093.595] GetFileSizeEx (in: hFile=0xe2c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=36820) returned 1
	[0093.595] CreateFileMappingA (hFile=0xe2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8fd7, lpName=0x0) returned 0xe30
	[0093.595] MapViewOfFile (hFileMappingObject=0xe30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0093.603] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0093.604] CloseHandle (hObject=0xe30) returned 1
	[0093.604] GetCurrentThreadId () returned 0x1b94
	[0093.604] FlushFileBuffers (hFile=0xe2c) returned 1
	[0093.606] CloseHandle (hObject=0xe2c) returned 1
	[0093.606] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145707.jpg") returned 97
	[0093.606] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145707.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145707.jpg")) returned 1
	[0093.607] free (_Block=0x328c8c0) 
	[0093.607] RtlExitUserThread (Status=0x0) 

Thread:
	id = 707
	os_tid = 0x1b98

	[0093.609] _alloca_probe () returned 0x40328a
	[0093.610] GetCurrentThreadId () returned 0x1b98
	[0093.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", dwFileAttributes=0x80) returned 1
	[0093.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe30
	[0093.611] GetFileSizeEx (in: hFile=0xe30, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=36792) returned 1
	[0093.611] CreateFileMappingA (hFile=0xe30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8fbf, lpName=0x0) returned 0xe34
	[0093.611] MapViewOfFile (hFileMappingObject=0xe34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0093.618] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0093.619] CloseHandle (hObject=0xe34) returned 1
	[0093.619] GetCurrentThreadId () returned 0x1b98
	[0093.619] FlushFileBuffers (hFile=0xe30) returned 1
	[0093.621] CloseHandle (hObject=0xe30) returned 1
	[0093.622] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145810.jpg") returned 97
	[0093.622] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145810.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145810.jpg")) returned 1
	[0093.622] free (_Block=0x3285888) 
	[0093.622] RtlExitUserThread (Status=0x0) 

Thread:
	id = 708
	os_tid = 0x1b9c

	[0093.683] _alloca_probe () returned 0x40328a
	[0093.684] GetCurrentThreadId () returned 0x1b9c
	[0093.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", dwFileAttributes=0x80) returned 1
	[0093.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe34
	[0093.685] GetFileSizeEx (in: hFile=0xe34, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=35419) returned 1
	[0093.685] CreateFileMappingA (hFile=0xe34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8a65, lpName=0x0) returned 0xe38
	[0093.685] MapViewOfFile (hFileMappingObject=0xe38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0093.692] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0093.692] CloseHandle (hObject=0xe38) returned 1
	[0093.693] GetCurrentThreadId () returned 0x1b9c
	[0093.693] FlushFileBuffers (hFile=0xe34) returned 1
	[0093.695] CloseHandle (hObject=0xe34) returned 1
	[0093.695] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145879.jpg") returned 97
	[0093.695] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145879.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145879.jpg")) returned 1
	[0093.696] free (_Block=0x32898a8) 
	[0093.696] RtlExitUserThread (Status=0x0) 

Thread:
	id = 709
	os_tid = 0x1ba0

	[0093.745] _alloca_probe () returned 0x40328a
	[0093.746] GetCurrentThreadId () returned 0x1ba0
	[0093.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", dwFileAttributes=0x80) returned 1
	[0093.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe38
	[0093.747] GetFileSizeEx (in: hFile=0xe38, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=33958) returned 1
	[0093.747] CreateFileMappingA (hFile=0xe38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x84ab, lpName=0x0) returned 0xe3c
	[0093.747] MapViewOfFile (hFileMappingObject=0xe3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0093.754] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0093.755] CloseHandle (hObject=0xe3c) returned 1
	[0093.755] GetCurrentThreadId () returned 0x1ba0
	[0093.755] FlushFileBuffers (hFile=0xe38) returned 1
	[0093.759] CloseHandle (hObject=0xe38) returned 1
	[0093.759] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145895.jpg") returned 97
	[0093.759] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145895.jpg")) returned 1
	[0093.760] free (_Block=0x328c8c0) 
	[0093.760] RtlExitUserThread (Status=0x0) 

Thread:
	id = 710
	os_tid = 0x1ba4

	[0093.756] _alloca_probe () returned 0x40328a
	[0093.757] GetCurrentThreadId () returned 0x1ba4
	[0093.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", dwFileAttributes=0x80) returned 1
	[0093.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe40
	[0093.758] GetFileSizeEx (in: hFile=0xe40, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=39542) returned 1
	[0093.758] CreateFileMappingA (hFile=0xe40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9a7b, lpName=0x0) returned 0xe44
	[0093.758] MapViewOfFile (hFileMappingObject=0xe44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0093.768] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0093.768] CloseHandle (hObject=0xe44) returned 1
	[0093.768] GetCurrentThreadId () returned 0x1ba4
	[0093.768] FlushFileBuffers (hFile=0xe40) returned 1
	[0093.770] CloseHandle (hObject=0xe40) returned 1
	[0093.771] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145904.jpg") returned 97
	[0093.771] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145904.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145904.jpg")) returned 1
	[0093.771] free (_Block=0x3286890) 
	[0093.772] RtlExitUserThread (Status=0x0) 

Thread:
	id = 711
	os_tid = 0x1ba8

	[0093.824] _alloca_probe () returned 0x40328a
	[0093.824] GetCurrentThreadId () returned 0x1ba8
	[0093.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", dwFileAttributes=0x80) returned 1
	[0093.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe44
	[0093.825] GetFileSizeEx (in: hFile=0xe44, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=46508) returned 1
	[0093.825] CreateFileMappingA (hFile=0xe44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb5b7, lpName=0x0) returned 0xe38
	[0093.825] MapViewOfFile (hFileMappingObject=0xe38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2450000
	[0093.834] UnmapViewOfFile (lpBaseAddress=0x2450000) returned 1
	[0093.835] CloseHandle (hObject=0xe38) returned 1
	[0093.835] GetCurrentThreadId () returned 0x1ba8
	[0093.835] FlushFileBuffers (hFile=0xe44) returned 1
	[0093.846] CloseHandle (hObject=0xe44) returned 1
	[0093.846] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0146142.jpg") returned 97
	[0093.846] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0146142.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0146142.jpg")) returned 1
	[0093.847] free (_Block=0x328c8c0) 
	[0093.847] RtlExitUserThread (Status=0x0) 

Thread:
	id = 712
	os_tid = 0x1bb0

	[0093.836] _alloca_probe () returned 0x40328a
	[0093.838] GetCurrentThreadId () returned 0x1bb0
	[0093.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", dwFileAttributes=0x80) returned 1
	[0093.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe48
	[0093.838] GetFileSizeEx (in: hFile=0xe48, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=43674) returned 1
	[0093.838] CreateFileMappingA (hFile=0xe48, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaaa3, lpName=0x0) returned 0xe4c
	[0093.839] MapViewOfFile (hFileMappingObject=0xe4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2450000
	[0093.849] UnmapViewOfFile (lpBaseAddress=0x2450000) returned 1
	[0093.849] CloseHandle (hObject=0xe4c) returned 1
	[0093.850] GetCurrentThreadId () returned 0x1bb0
	[0093.850] FlushFileBuffers (hFile=0xe48) returned 1
	[0093.852] CloseHandle (hObject=0xe48) returned 1
	[0093.852] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148309.jpg") returned 97
	[0093.852] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148309.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0148309.jpg")) returned 1
	[0093.852] free (_Block=0x32888a0) 
	[0093.853] RtlExitUserThread (Status=0x0) 

Thread:
	id = 713
	os_tid = 0x1bb4

	[0094.043] _alloca_probe () returned 0x40328a
	[0094.044] GetCurrentThreadId () returned 0x1bb4
	[0094.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", dwFileAttributes=0x80) returned 1
	[0094.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4c
	[0094.045] GetFileSizeEx (in: hFile=0xe4c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=67540) returned 1
	[0094.045] CreateFileMappingA (hFile=0xe4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x107d7, lpName=0x0) returned 0xe44
	[0094.045] MapViewOfFile (hFileMappingObject=0xe44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0094.059] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0094.059] CloseHandle (hObject=0xe44) returned 1
	[0094.059] GetCurrentThreadId () returned 0x1bb4
	[0094.059] FlushFileBuffers (hFile=0xe4c) returned 1
	[0094.069] CloseHandle (hObject=0xe4c) returned 1
	[0094.069] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148757.jpg") returned 97
	[0094.069] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148757.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0148757.jpg")) returned 1
	[0094.070] free (_Block=0x3287898) 
	[0094.070] RtlExitUserThread (Status=0x0) 

Thread:
	id = 714
	os_tid = 0x1bc0

	[0094.060] _alloca_probe () returned 0x40328a
	[0094.061] GetCurrentThreadId () returned 0x1bc0
	[0094.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", dwFileAttributes=0x80) returned 1
	[0094.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe44
	[0094.062] GetFileSizeEx (in: hFile=0xe44, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=38237) returned 1
	[0094.062] CreateFileMappingA (hFile=0xe44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9569, lpName=0x0) returned 0xe54
	[0094.062] MapViewOfFile (hFileMappingObject=0xe54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0094.071] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0094.072] CloseHandle (hObject=0xe54) returned 1
	[0094.072] GetCurrentThreadId () returned 0x1bc0
	[0094.072] FlushFileBuffers (hFile=0xe44) returned 1
	[0094.074] CloseHandle (hObject=0xe44) returned 1
	[0094.074] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148798.jpg") returned 97
	[0094.074] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148798.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0148798.jpg")) returned 1
	[0094.075] free (_Block=0x32898a8) 
	[0094.075] RtlExitUserThread (Status=0x0) 

Thread:
	id = 715
	os_tid = 0x1bc4

	[0094.417] _alloca_probe () returned 0x40328a
	[0094.417] GetCurrentThreadId () returned 0x1bc4
	[0094.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", dwFileAttributes=0x80) returned 1
	[0094.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe54
	[0094.418] GetFileSizeEx (in: hFile=0xe54, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=27393) returned 1
	[0094.418] CreateFileMappingA (hFile=0xe54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6b01, lpName=0x0) returned 0xe4c
	[0094.418] MapViewOfFile (hFileMappingObject=0xe4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0094.423] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0094.424] CloseHandle (hObject=0xe4c) returned 1
	[0094.424] GetCurrentThreadId () returned 0x1bc4
	[0094.424] FlushFileBuffers (hFile=0xe54) returned 1
	[0094.426] CloseHandle (hObject=0xe54) returned 1
	[0094.426] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149018.jpg") returned 97
	[0094.426] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149018.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0149018.jpg")) returned 1
	[0094.427] free (_Block=0x328c8c0) 
	[0094.427] RtlExitUserThread (Status=0x0) 

Thread:
	id = 716
	os_tid = 0x1bcc

	[0094.509] _alloca_probe () returned 0x40328a
	[0094.510] GetCurrentThreadId () returned 0x1bcc
	[0094.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", dwFileAttributes=0x80) returned 1
	[0094.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4c
	[0094.510] GetFileSizeEx (in: hFile=0xe4c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=64802) returned 1
	[0094.511] CreateFileMappingA (hFile=0xe4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfd23, lpName=0x0) returned 0xe58
	[0094.511] MapViewOfFile (hFileMappingObject=0xe58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0094.522] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0094.523] CloseHandle (hObject=0xe58) returned 1
	[0094.523] GetCurrentThreadId () returned 0x1bcc
	[0094.523] FlushFileBuffers (hFile=0xe4c) returned 1
	[0094.526] CloseHandle (hObject=0xe4c) returned 1
	[0094.526] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149118.jpg") returned 97
	[0094.526] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149118.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0149118.jpg")) returned 1
	[0094.527] free (_Block=0x3286890) 
	[0094.527] RtlExitUserThread (Status=0x0) 

Thread:
	id = 717
	os_tid = 0x1bd4

	[0094.529] _alloca_probe () returned 0x40328a
	[0094.530] GetCurrentThreadId () returned 0x1bd4
	[0094.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", dwFileAttributes=0x80) returned 1
	[0094.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe58
	[0094.531] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=46484) returned 1
	[0094.531] CreateFileMappingA (hFile=0xe58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb597, lpName=0x0) returned 0xe5c
	[0094.531] MapViewOfFile (hFileMappingObject=0xe5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0094.543] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0094.544] CloseHandle (hObject=0xe5c) returned 1
	[0094.544] GetCurrentThreadId () returned 0x1bd4
	[0094.544] FlushFileBuffers (hFile=0xe58) returned 1
	[0094.553] CloseHandle (hObject=0xe58) returned 1
	[0094.553] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0164153.jpg") returned 97
	[0094.554] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0164153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0164153.jpg")) returned 1
	[0094.554] free (_Block=0x328c8c0) 
	[0094.554] RtlExitUserThread (Status=0x0) 

Thread:
	id = 718
	os_tid = 0x1bd8

	[0094.538] _alloca_probe () returned 0x40328a
	[0094.538] GetCurrentThreadId () returned 0x1bd8
	[0094.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", dwFileAttributes=0x80) returned 1
	[0094.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe5c
	[0094.545] GetFileSizeEx (in: hFile=0xe5c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=24982) returned 1
	[0094.545] CreateFileMappingA (hFile=0xe5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x619b, lpName=0x0) returned 0xe64
	[0094.545] MapViewOfFile (hFileMappingObject=0xe64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0094.552] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0094.552] CloseHandle (hObject=0xe64) returned 1
	[0094.552] GetCurrentThreadId () returned 0x1bd8
	[0094.552] FlushFileBuffers (hFile=0xe5c) returned 1
	[0094.556] CloseHandle (hObject=0xe5c) returned 1
	[0094.556] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0174952.jpg") returned 97
	[0094.556] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0174952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0174952.jpg")) returned 1
	[0094.557] free (_Block=0x3285888) 
	[0094.557] RtlExitUserThread (Status=0x0) 

Thread:
	id = 719
	os_tid = 0x1bdc

	[0094.558] _alloca_probe () returned 0x40328a
	[0094.559] GetCurrentThreadId () returned 0x1bdc
	[0094.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", dwFileAttributes=0x80) returned 1
	[0094.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe58
	[0094.560] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=46461) returned 1
	[0094.560] CreateFileMappingA (hFile=0xe58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb589, lpName=0x0) returned 0xe64
	[0094.560] MapViewOfFile (hFileMappingObject=0xe64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0094.569] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0094.570] CloseHandle (hObject=0xe64) returned 1
	[0094.570] GetCurrentThreadId () returned 0x1bdc
	[0094.570] FlushFileBuffers (hFile=0xe58) returned 1
	[0094.574] CloseHandle (hObject=0xe58) returned 1
	[0094.574] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175361.jpg") returned 97
	[0094.574] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0175361.jpg")) returned 1
	[0094.574] free (_Block=0x3287898) 
	[0094.574] RtlExitUserThread (Status=0x0) 

Thread:
	id = 720
	os_tid = 0x1be0

	[0094.571] _alloca_probe () returned 0x40328a
	[0094.572] GetCurrentThreadId () returned 0x1be0
	[0094.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", dwFileAttributes=0x80) returned 1
	[0094.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe64
	[0094.573] GetFileSizeEx (in: hFile=0xe64, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=14552) returned 1
	[0094.573] CreateFileMappingA (hFile=0xe64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x38df, lpName=0x0) returned 0xe6c
	[0094.573] MapViewOfFile (hFileMappingObject=0xe6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0094.577] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0094.578] CloseHandle (hObject=0xe6c) returned 1
	[0094.578] GetCurrentThreadId () returned 0x1be0
	[0094.578] FlushFileBuffers (hFile=0xe64) returned 1
	[0094.580] CloseHandle (hObject=0xe64) returned 1
	[0094.580] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175428.jpg") returned 97
	[0094.580] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175428.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0175428.jpg")) returned 1
	[0094.581] free (_Block=0x3285888) 
	[0094.581] RtlExitUserThread (Status=0x0) 

Thread:
	id = 729
	os_tid = 0x1be4

	[0095.262] _alloca_probe () returned 0x40328a
	[0095.263] GetCurrentThreadId () returned 0x1be4
	[0095.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", dwFileAttributes=0x80) returned 1
	[0095.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe6c
	[0095.265] GetFileSizeEx (in: hFile=0xe6c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=45358) returned 1
	[0095.265] CreateFileMappingA (hFile=0xe6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb13b, lpName=0x0) returned 0xe58
	[0095.265] MapViewOfFile (hFileMappingObject=0xe58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.274] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.275] CloseHandle (hObject=0xe58) returned 1
	[0095.275] GetCurrentThreadId () returned 0x1be4
	[0095.275] FlushFileBuffers (hFile=0xe6c) returned 1
	[0095.277] CloseHandle (hObject=0xe6c) returned 1
	[0095.278] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177257.jpg") returned 97
	[0095.278] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177257.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0177257.jpg")) returned 1
	[0095.278] free (_Block=0x328c8c0) 
	[0095.278] RtlExitUserThread (Status=0x0) 

Thread:
	id = 730
	os_tid = 0x12d8

	[0095.281] _alloca_probe () returned 0x40328a
	[0095.281] GetCurrentThreadId () returned 0x12d8
	[0095.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", dwFileAttributes=0x80) returned 1
	[0095.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe6c
	[0095.282] GetFileSizeEx (in: hFile=0xe6c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=55554) returned 1
	[0095.282] CreateFileMappingA (hFile=0xe6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd903, lpName=0x0) returned 0xe58
	[0095.282] MapViewOfFile (hFileMappingObject=0xe58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0095.293] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0095.294] CloseHandle (hObject=0xe58) returned 1
	[0095.294] GetCurrentThreadId () returned 0x12d8
	[0095.294] FlushFileBuffers (hFile=0xe6c) returned 1
	[0095.297] CloseHandle (hObject=0xe6c) returned 1
	[0095.297] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177806.jpg") returned 97
	[0095.297] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177806.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0177806.jpg")) returned 1
	[0095.298] free (_Block=0x3285888) 
	[0095.298] RtlExitUserThread (Status=0x0) 

Thread:
	id = 731
	os_tid = 0x12e0

	[0095.301] _alloca_probe () returned 0x40328a
	[0095.301] GetCurrentThreadId () returned 0x12e0
	[0095.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", dwFileAttributes=0x80) returned 1
	[0095.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe6c
	[0095.302] GetFileSizeEx (in: hFile=0xe6c, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=36989) returned 1
	[0095.302] CreateFileMappingA (hFile=0xe6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9089, lpName=0x0) returned 0xe58
	[0095.302] MapViewOfFile (hFileMappingObject=0xe58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0095.310] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0095.310] CloseHandle (hObject=0xe58) returned 1
	[0095.310] GetCurrentThreadId () returned 0x12e0
	[0095.310] FlushFileBuffers (hFile=0xe6c) returned 1
	[0095.313] CloseHandle (hObject=0xe6c) returned 1
	[0095.313] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178348.jpg") returned 97
	[0095.313] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178348.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178348.jpg")) returned 1
	[0095.313] free (_Block=0x328c8c0) 
	[0095.313] RtlExitUserThread (Status=0x0) 

Thread:
	id = 732
	os_tid = 0xddc

	[0095.315] _alloca_probe () returned 0x40328a
	[0095.315] GetCurrentThreadId () returned 0xddc
	[0095.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", dwFileAttributes=0x80) returned 1
	[0095.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe58
	[0095.316] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=29204) returned 1
	[0095.316] CreateFileMappingA (hFile=0xe58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7217, lpName=0x0) returned 0xe78
	[0095.316] MapViewOfFile (hFileMappingObject=0xe78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2450000
	[0095.322] UnmapViewOfFile (lpBaseAddress=0x2450000) returned 1
	[0095.323] CloseHandle (hObject=0xe78) returned 1
	[0095.323] GetCurrentThreadId () returned 0xddc
	[0095.323] FlushFileBuffers (hFile=0xe58) returned 1
	[0095.326] CloseHandle (hObject=0xe58) returned 1
	[0095.326] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178459.jpg") returned 97
	[0095.326] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178459.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178459.jpg")) returned 1
	[0095.326] free (_Block=0x32898a8) 
	[0095.326] RtlExitUserThread (Status=0x0) 

Thread:
	id = 733
	os_tid = 0x4f8

	[0095.432] _alloca_probe () returned 0x40328a
	[0095.432] GetCurrentThreadId () returned 0x4f8
	[0095.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", dwFileAttributes=0x80) returned 1
	[0095.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe78
	[0095.433] GetFileSizeEx (in: hFile=0xe78, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=26531) returned 1
	[0095.433] CreateFileMappingA (hFile=0xe78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x67a5, lpName=0x0) returned 0xe7c
	[0095.433] MapViewOfFile (hFileMappingObject=0xe7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0095.439] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0095.439] CloseHandle (hObject=0xe7c) returned 1
	[0095.439] GetCurrentThreadId () returned 0x4f8
	[0095.439] FlushFileBuffers (hFile=0xe78) returned 1
	[0095.443] CloseHandle (hObject=0xe78) returned 1
	[0095.443] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178460.jpg") returned 97
	[0095.443] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178460.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178460.jpg")) returned 1
	[0095.444] free (_Block=0x3287898) 
	[0095.444] RtlExitUserThread (Status=0x0) 

Thread:
	id = 734
	os_tid = 0x390

	[0095.446] _alloca_probe () returned 0x40328a
	[0095.446] GetCurrentThreadId () returned 0x390
	[0095.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", dwFileAttributes=0x80) returned 1
	[0095.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe7c
	[0095.448] GetFileSizeEx (in: hFile=0xe7c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=24034) returned 1
	[0095.448] CreateFileMappingA (hFile=0xe7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5de3, lpName=0x0) returned 0xe80
	[0095.448] MapViewOfFile (hFileMappingObject=0xe80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.453] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.453] CloseHandle (hObject=0xe80) returned 1
	[0095.453] GetCurrentThreadId () returned 0x390
	[0095.453] FlushFileBuffers (hFile=0xe7c) returned 1
	[0095.492] CloseHandle (hObject=0xe7c) returned 1
	[0095.493] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178523.jpg") returned 97
	[0095.493] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178523.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178523.jpg")) returned 1
	[0095.494] free (_Block=0x328c8c0) 
	[0095.494] RtlExitUserThread (Status=0x0) 

Thread:
	id = 735
	os_tid = 0x12f8

	[0095.454] _alloca_probe () returned 0x40328a
	[0095.455] GetCurrentThreadId () returned 0x12f8
	[0095.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", dwFileAttributes=0x80) returned 1
	[0095.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe84
	[0095.456] GetFileSizeEx (in: hFile=0xe84, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=23338) returned 1
	[0095.456] CreateFileMappingA (hFile=0xe84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b33, lpName=0x0) returned 0xe88
	[0095.456] MapViewOfFile (hFileMappingObject=0xe88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.477] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.477] CloseHandle (hObject=0xe88) returned 1
	[0095.477] GetCurrentThreadId () returned 0x12f8
	[0095.477] FlushFileBuffers (hFile=0xe84) returned 1
	[0095.499] CloseHandle (hObject=0xe84) returned 1
	[0095.499] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178632.jpg") returned 97
	[0095.499] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178632.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178632.jpg")) returned 1
	[0095.500] free (_Block=0x32898a8) 
	[0095.500] RtlExitUserThread (Status=0x0) 

Thread:
	id = 736
	os_tid = 0xc48

	[0095.457] _alloca_probe () returned 0x40328a
	[0095.458] GetCurrentThreadId () returned 0xc48
	[0095.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", dwFileAttributes=0x80) returned 1
	[0095.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe90
	[0095.458] GetFileSizeEx (in: hFile=0xe90, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=32038) returned 1
	[0095.458] CreateFileMappingA (hFile=0xe90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d2b, lpName=0x0) returned 0xe94
	[0095.458] MapViewOfFile (hFileMappingObject=0xe94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x26a0000
	[0095.472] UnmapViewOfFile (lpBaseAddress=0x26a0000) returned 1
	[0095.472] CloseHandle (hObject=0xe94) returned 1
	[0095.472] GetCurrentThreadId () returned 0xc48
	[0095.472] FlushFileBuffers (hFile=0xe90) returned 1
	[0095.496] CloseHandle (hObject=0xe90) returned 1
	[0095.496] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178639.jpg") returned 97
	[0095.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178639.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178639.jpg")) returned 1
	[0095.497] free (_Block=0x3285888) 
	[0095.497] RtlExitUserThread (Status=0x0) 

Thread:
	id = 737
	os_tid = 0x1c04

	[0095.460] _alloca_probe () returned 0x40328a
	[0095.461] GetCurrentThreadId () returned 0x1c04
	[0095.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", dwFileAttributes=0x80) returned 1
	[0095.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe9c
	[0095.462] GetFileSizeEx (in: hFile=0xe9c, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=35340) returned 1
	[0095.462] CreateFileMappingA (hFile=0xe9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8a17, lpName=0x0) returned 0xea0
	[0095.462] MapViewOfFile (hFileMappingObject=0xea0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3530000
	[0095.491] UnmapViewOfFile (lpBaseAddress=0x3530000) returned 1
	[0095.492] CloseHandle (hObject=0xea0) returned 1
	[0095.492] GetCurrentThreadId () returned 0x1c04
	[0095.492] FlushFileBuffers (hFile=0xe9c) returned 1
	[0095.500] CloseHandle (hObject=0xe9c) returned 1
	[0095.501] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178932.jpg") returned 97
	[0095.501] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178932.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178932.jpg")) returned 1
	[0095.501] free (_Block=0x328d8c8) 
	[0095.501] RtlExitUserThread (Status=0x0) 

Thread:
	id = 738
	os_tid = 0x1c08

	[0095.464] _alloca_probe () returned 0x40328a
	[0095.464] GetCurrentThreadId () returned 0x1c08
	[0095.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", dwFileAttributes=0x80) returned 1
	[0095.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xea8
	[0095.466] GetFileSizeEx (in: hFile=0xea8, lpFileSize=0x367ff5c | out: lpFileSize=0x367ff5c*=32110) returned 1
	[0095.466] CreateFileMappingA (hFile=0xea8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d7b, lpName=0x0) returned 0xeac
	[0095.466] MapViewOfFile (hFileMappingObject=0xeac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3680000
	[0095.490] UnmapViewOfFile (lpBaseAddress=0x3680000) returned 1
	[0095.490] CloseHandle (hObject=0xeac) returned 1
	[0095.490] GetCurrentThreadId () returned 0x1c08
	[0095.490] FlushFileBuffers (hFile=0xea8) returned 1
	[0095.498] CloseHandle (hObject=0xea8) returned 1
	[0095.498] _swprintf (in: param_1=0x3679f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0179963.jpg") returned 97
	[0095.498] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0179963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0179963.jpg")) returned 1
	[0095.499] free (_Block=0x3286890) 
	[0095.499] RtlExitUserThread (Status=0x0) 

Thread:
	id = 739
	os_tid = 0x1c0c

	[0095.503] _alloca_probe () returned 0x40328a
	[0095.503] GetCurrentThreadId () returned 0x1c0c
	[0095.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", dwFileAttributes=0x80) returned 1
	[0095.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe84
	[0095.504] GetFileSizeEx (in: hFile=0xe84, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=16615) returned 1
	[0095.504] CreateFileMappingA (hFile=0xe84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40ed, lpName=0x0) returned 0xea8
	[0095.504] MapViewOfFile (hFileMappingObject=0xea8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.508] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.508] CloseHandle (hObject=0xea8) returned 1
	[0095.508] GetCurrentThreadId () returned 0x1c0c
	[0095.508] FlushFileBuffers (hFile=0xe84) returned 1
	[0095.511] CloseHandle (hObject=0xe84) returned 1
	[0095.511] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0182689.jpg") returned 97
	[0095.511] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0182689.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0182689.jpg")) returned 1
	[0095.512] free (_Block=0x3285888) 
	[0095.512] RtlExitUserThread (Status=0x0) 

Thread:
	id = 740
	os_tid = 0x1c10

	[0095.516] _alloca_probe () returned 0x40328a
	[0095.516] GetCurrentThreadId () returned 0x1c10
	[0095.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", dwFileAttributes=0x80) returned 1
	[0095.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xea8
	[0095.521] GetFileSizeEx (in: hFile=0xea8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=42254) returned 1
	[0095.521] CreateFileMappingA (hFile=0xea8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa51b, lpName=0x0) returned 0xe90
	[0095.521] MapViewOfFile (hFileMappingObject=0xe90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.529] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.530] CloseHandle (hObject=0xe90) returned 1
	[0095.530] GetCurrentThreadId () returned 0x1c10
	[0095.530] FlushFileBuffers (hFile=0xea8) returned 1
	[0096.348] CloseHandle (hObject=0xea8) returned 1
	[0096.348] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0202045.jpg") returned 97
	[0096.348] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0202045.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0202045.jpg")) returned 1
	[0096.349] free (_Block=0x3287898) 
	[0096.349] RtlExitUserThread (Status=0x0) 

Thread:
	id = 741
	os_tid = 0x1c14

	[0095.532] _alloca_probe () returned 0x40328a
	[0095.533] GetCurrentThreadId () returned 0x1c14
	[0095.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", dwFileAttributes=0x80) returned 1
	[0095.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe7c
	[0095.534] GetFileSizeEx (in: hFile=0xe7c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=42883) returned 1
	[0095.534] CreateFileMappingA (hFile=0xe7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa785, lpName=0x0) returned 0xea0
	[0095.534] MapViewOfFile (hFileMappingObject=0xea0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.544] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.544] CloseHandle (hObject=0xea0) returned 1
	[0095.544] GetCurrentThreadId () returned 0x1c14
	[0095.544] FlushFileBuffers (hFile=0xe7c) returned 1
	[0095.552] CloseHandle (hObject=0xe7c) returned 1
	[0095.553] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216112.jpg") returned 97
	[0095.553] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216112.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0216112.jpg")) returned 1
	[0095.554] free (_Block=0x3286890) 
	[0095.554] RtlExitUserThread (Status=0x0) 

Thread:
	id = 742
	os_tid = 0x1c18

	[0095.541] _alloca_probe () returned 0x40328a
	[0095.542] GetCurrentThreadId () returned 0x1c18
	[0095.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", dwFileAttributes=0x80) returned 1
	[0095.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xea0
	[0095.546] GetFileSizeEx (in: hFile=0xea0, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=21620) returned 1
	[0095.546] CreateFileMappingA (hFile=0xea0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5477, lpName=0x0) returned 0xe88
	[0095.546] MapViewOfFile (hFileMappingObject=0xe88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.550] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.550] CloseHandle (hObject=0xe88) returned 1
	[0095.550] GetCurrentThreadId () returned 0x1c18
	[0095.550] FlushFileBuffers (hFile=0xea0) returned 1
	[0095.554] CloseHandle (hObject=0xea0) returned 1
	[0095.554] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216153.jpg") returned 97
	[0095.554] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0216153.jpg")) returned 1
	[0095.555] free (_Block=0x32888a0) 
	[0095.555] RtlExitUserThread (Status=0x0) 

Thread:
	id = 743
	os_tid = 0x1c1c

	[0095.557] _alloca_probe () returned 0x40328a
	[0095.557] GetCurrentThreadId () returned 0x1c1c
	[0095.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", dwFileAttributes=0x80) returned 1
	[0095.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe7c
	[0095.558] GetFileSizeEx (in: hFile=0xe7c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=35542) returned 1
	[0095.558] CreateFileMappingA (hFile=0xe7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8adb, lpName=0x0) returned 0xe88
	[0095.558] MapViewOfFile (hFileMappingObject=0xe88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.566] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.566] CloseHandle (hObject=0xe88) returned 1
	[0095.566] GetCurrentThreadId () returned 0x1c1c
	[0095.566] FlushFileBuffers (hFile=0xe7c) returned 1
	[0095.576] CloseHandle (hObject=0xe7c) returned 1
	[0095.576] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227419.jpg") returned 97
	[0095.576] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227419.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0227419.jpg")) returned 1
	[0095.577] free (_Block=0x328c8c0) 
	[0095.577] RtlExitUserThread (Status=0x0) 

Thread:
	id = 744
	os_tid = 0x1c20

	[0095.567] _alloca_probe () returned 0x40328a
	[0095.568] GetCurrentThreadId () returned 0x1c20
	[0095.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", dwFileAttributes=0x80) returned 1
	[0095.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe88
	[0095.569] GetFileSizeEx (in: hFile=0xe88, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=58089) returned 1
	[0095.569] CreateFileMappingA (hFile=0xe88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe2f1, lpName=0x0) returned 0xeb0
	[0095.569] MapViewOfFile (hFileMappingObject=0xeb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.581] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.582] CloseHandle (hObject=0xeb0) returned 1
	[0095.582] GetCurrentThreadId () returned 0x1c20
	[0095.582] FlushFileBuffers (hFile=0xe88) returned 1
	[0095.585] CloseHandle (hObject=0xe88) returned 1
	[0095.585] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227558.jpg") returned 97
	[0095.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227558.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0227558.jpg")) returned 1
	[0095.586] free (_Block=0x32888a0) 
	[0095.586] RtlExitUserThread (Status=0x0) 

Thread:
	id = 745
	os_tid = 0x1c24

	[0095.589] _alloca_probe () returned 0x40328a
	[0095.589] GetCurrentThreadId () returned 0x1c24
	[0095.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", dwFileAttributes=0x80) returned 1
	[0095.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeb0
	[0095.590] GetFileSizeEx (in: hFile=0xeb0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=35236) returned 1
	[0095.590] CreateFileMappingA (hFile=0xeb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x89a7, lpName=0x0) returned 0xe7c
	[0095.590] MapViewOfFile (hFileMappingObject=0xe7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.598] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.598] CloseHandle (hObject=0xe7c) returned 1
	[0095.598] GetCurrentThreadId () returned 0x1c24
	[0095.598] FlushFileBuffers (hFile=0xeb0) returned 1
	[0095.603] CloseHandle (hObject=0xeb0) returned 1
	[0095.603] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287641.jpg") returned 97
	[0095.604] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287641.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287641.jpg")) returned 1
	[0095.604] free (_Block=0x328c8c0) 
	[0095.604] RtlExitUserThread (Status=0x0) 

Thread:
	id = 746
	os_tid = 0x1c28

	[0095.600] _alloca_probe () returned 0x40328a
	[0095.601] GetCurrentThreadId () returned 0x1c28
	[0095.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", dwFileAttributes=0x80) returned 1
	[0095.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe7c
	[0095.603] GetFileSizeEx (in: hFile=0xe7c, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=17105) returned 1
	[0095.603] CreateFileMappingA (hFile=0xe7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x42d1, lpName=0x0) returned 0xeb8
	[0095.603] MapViewOfFile (hFileMappingObject=0xeb8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.608] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.608] CloseHandle (hObject=0xeb8) returned 1
	[0095.608] GetCurrentThreadId () returned 0x1c28
	[0095.608] FlushFileBuffers (hFile=0xe7c) returned 1
	[0095.610] CloseHandle (hObject=0xe7c) returned 1
	[0095.611] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287642.jpg") returned 97
	[0095.611] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287642.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287642.jpg")) returned 1
	[0095.611] free (_Block=0x32898a8) 
	[0095.611] RtlExitUserThread (Status=0x0) 

Thread:
	id = 747
	os_tid = 0x1c2c

	[0095.612] _alloca_probe () returned 0x40328a
	[0095.613] GetCurrentThreadId () returned 0x1c2c
	[0095.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", dwFileAttributes=0x80) returned 1
	[0095.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe7c
	[0095.614] GetFileSizeEx (in: hFile=0xe7c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=16017) returned 1
	[0095.614] CreateFileMappingA (hFile=0xe7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e91, lpName=0x0) returned 0xeb0
	[0095.614] MapViewOfFile (hFileMappingObject=0xeb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.618] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.618] CloseHandle (hObject=0xeb0) returned 1
	[0095.618] GetCurrentThreadId () returned 0x1c2c
	[0095.618] FlushFileBuffers (hFile=0xe7c) returned 1
	[0095.620] CloseHandle (hObject=0xe7c) returned 1
	[0095.620] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287643.jpg") returned 97
	[0095.620] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287643.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287643.jpg")) returned 1
	[0095.621] free (_Block=0x3285888) 
	[0095.621] RtlExitUserThread (Status=0x0) 

Thread:
	id = 748
	os_tid = 0x1c30

	[0095.622] _alloca_probe () returned 0x40328a
	[0095.623] GetCurrentThreadId () returned 0x1c30
	[0095.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", dwFileAttributes=0x80) returned 1
	[0095.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeb0
	[0095.624] GetFileSizeEx (in: hFile=0xeb0, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=17349) returned 1
	[0095.624] CreateFileMappingA (hFile=0xeb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x43c9, lpName=0x0) returned 0xebc
	[0095.624] MapViewOfFile (hFileMappingObject=0xebc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.627] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.628] CloseHandle (hObject=0xebc) returned 1
	[0095.628] GetCurrentThreadId () returned 0x1c30
	[0095.628] FlushFileBuffers (hFile=0xeb0) returned 1
	[0095.633] CloseHandle (hObject=0xeb0) returned 1
	[0095.633] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287644.jpg") returned 97
	[0095.633] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287644.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287644.jpg")) returned 1
	[0095.634] free (_Block=0x32888a0) 
	[0095.634] RtlExitUserThread (Status=0x0) 

Thread:
	id = 749
	os_tid = 0x1c34

	[0095.630] _alloca_probe () returned 0x40328a
	[0095.631] GetCurrentThreadId () returned 0x1c34
	[0095.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", dwFileAttributes=0x80) returned 1
	[0095.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec0
	[0095.632] GetFileSizeEx (in: hFile=0xec0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=36230) returned 1
	[0095.632] CreateFileMappingA (hFile=0xec0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8d8b, lpName=0x0) returned 0xec4
	[0095.632] MapViewOfFile (hFileMappingObject=0xec4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.641] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.641] CloseHandle (hObject=0xec4) returned 1
	[0095.641] GetCurrentThreadId () returned 0x1c34
	[0095.641] FlushFileBuffers (hFile=0xec0) returned 1
	[0095.643] CloseHandle (hObject=0xec0) returned 1
	[0095.644] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287645.jpg") returned 97
	[0095.644] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287645.jpg")) returned 1
	[0095.644] free (_Block=0x328c8c0) 
	[0095.644] RtlExitUserThread (Status=0x0) 

Thread:
	id = 750
	os_tid = 0x1c38

	[0095.645] _alloca_probe () returned 0x40328a
	[0095.646] GetCurrentThreadId () returned 0x1c38
	[0095.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", dwFileAttributes=0x80) returned 1
	[0095.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec4
	[0095.647] GetFileSizeEx (in: hFile=0xec4, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=11553) returned 1
	[0095.647] CreateFileMappingA (hFile=0xec4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2d21, lpName=0x0) returned 0xeb0
	[0095.647] MapViewOfFile (hFileMappingObject=0xeb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.650] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.650] CloseHandle (hObject=0xeb0) returned 1
	[0095.650] GetCurrentThreadId () returned 0x1c38
	[0095.650] FlushFileBuffers (hFile=0xec4) returned 1
	[0095.652] CloseHandle (hObject=0xec4) returned 1
	[0095.652] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0289430.jpg") returned 97
	[0095.652] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0289430.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0289430.jpg")) returned 1
	[0095.653] free (_Block=0x3285888) 
	[0095.653] RtlExitUserThread (Status=0x0) 

Thread:
	id = 751
	os_tid = 0x1c3c

	[0095.654] _alloca_probe () returned 0x40328a
	[0095.655] GetCurrentThreadId () returned 0x1c3c
	[0095.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", dwFileAttributes=0x80) returned 1
	[0095.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeb0
	[0095.656] GetFileSizeEx (in: hFile=0xeb0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=10692) returned 1
	[0095.656] CreateFileMappingA (hFile=0xeb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x29c7, lpName=0x0) returned 0xec8
	[0095.656] MapViewOfFile (hFileMappingObject=0xec8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.659] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.659] CloseHandle (hObject=0xec8) returned 1
	[0095.659] GetCurrentThreadId () returned 0x1c3c
	[0095.659] FlushFileBuffers (hFile=0xeb0) returned 1
	[0095.662] CloseHandle (hObject=0xeb0) returned 1
	[0095.662] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309480.jpg") returned 97
	[0095.662] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309480.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309480.jpg")) returned 1
	[0095.664] free (_Block=0x328c8c0) 
	[0095.664] RtlExitUserThread (Status=0x0) 

Thread:
	id = 752
	os_tid = 0x1c40

	[0095.661] _alloca_probe () returned 0x40328a
	[0095.662] GetCurrentThreadId () returned 0x1c40
	[0095.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", dwFileAttributes=0x80) returned 1
	[0095.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xecc
	[0095.663] GetFileSizeEx (in: hFile=0xecc, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=21580) returned 1
	[0095.663] CreateFileMappingA (hFile=0xecc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5457, lpName=0x0) returned 0xed0
	[0095.664] MapViewOfFile (hFileMappingObject=0xed0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.669] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.669] CloseHandle (hObject=0xed0) returned 1
	[0095.669] GetCurrentThreadId () returned 0x1c40
	[0095.669] FlushFileBuffers (hFile=0xecc) returned 1
	[0095.673] CloseHandle (hObject=0xecc) returned 1
	[0095.673] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309567.jpg") returned 97
	[0095.673] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309567.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309567.jpg")) returned 1
	[0095.674] free (_Block=0x32888a0) 
	[0095.674] RtlExitUserThread (Status=0x0) 

Thread:
	id = 753
	os_tid = 0x1c44

	[0095.671] _alloca_probe () returned 0x40328a
	[0095.671] GetCurrentThreadId () returned 0x1c44
	[0095.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", dwFileAttributes=0x80) returned 1
	[0095.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeb0
	[0095.673] GetFileSizeEx (in: hFile=0xeb0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=39563) returned 1
	[0095.673] CreateFileMappingA (hFile=0xeb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9a95, lpName=0x0) returned 0xed4
	[0095.673] MapViewOfFile (hFileMappingObject=0xed4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.682] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.682] CloseHandle (hObject=0xed4) returned 1
	[0095.682] GetCurrentThreadId () returned 0x1c44
	[0095.682] FlushFileBuffers (hFile=0xeb0) returned 1
	[0095.692] CloseHandle (hObject=0xeb0) returned 1
	[0095.692] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309585.jpg") returned 97
	[0095.692] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309585.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309585.jpg")) returned 1
	[0095.693] free (_Block=0x3285888) 
	[0095.693] RtlExitUserThread (Status=0x0) 

Thread:
	id = 754
	os_tid = 0x1c48

	[0095.684] _alloca_probe () returned 0x40328a
	[0095.684] GetCurrentThreadId () returned 0x1c48
	[0095.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", dwFileAttributes=0x80) returned 1
	[0095.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xecc
	[0095.685] GetFileSizeEx (in: hFile=0xecc, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=33264) returned 1
	[0095.685] CreateFileMappingA (hFile=0xecc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x81f0, lpName=0x0) returned 0xed8
	[0095.685] MapViewOfFile (hFileMappingObject=0xed8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.693] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.694] CloseHandle (hObject=0xed8) returned 1
	[0095.694] GetCurrentThreadId () returned 0x1c48
	[0095.694] FlushFileBuffers (hFile=0xecc) returned 1
	[0095.695] CloseHandle (hObject=0xecc) returned 1
	[0095.696] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309598.jpg") returned 97
	[0095.696] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309598.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309598.jpg")) returned 1
	[0095.696] free (_Block=0x328d8c8) 
	[0095.696] RtlExitUserThread (Status=0x0) 

Thread:
	id = 755
	os_tid = 0x1c4c

	[0095.698] _alloca_probe () returned 0x40328a
	[0095.698] GetCurrentThreadId () returned 0x1c4c
	[0095.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", dwFileAttributes=0x80) returned 1
	[0095.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xed8
	[0095.699] GetFileSizeEx (in: hFile=0xed8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=43707) returned 1
	[0095.699] CreateFileMappingA (hFile=0xed8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaac5, lpName=0x0) returned 0xeb0
	[0095.700] MapViewOfFile (hFileMappingObject=0xeb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.708] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.708] CloseHandle (hObject=0xeb0) returned 1
	[0095.708] GetCurrentThreadId () returned 0x1c4c
	[0095.708] FlushFileBuffers (hFile=0xed8) returned 1
	[0095.713] CloseHandle (hObject=0xed8) returned 1
	[0095.713] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309664.jpg") returned 97
	[0095.713] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309664.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309664.jpg")) returned 1
	[0095.714] free (_Block=0x328c8c0) 
	[0095.714] RtlExitUserThread (Status=0x0) 

Thread:
	id = 756
	os_tid = 0x1c50

	[0095.860] _alloca_probe () returned 0x40328a
	[0095.861] GetCurrentThreadId () returned 0x1c50
	[0095.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", dwFileAttributes=0x80) returned 1
	[0095.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xed8
	[0095.862] GetFileSizeEx (in: hFile=0xed8, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=19162) returned 1
	[0095.862] CreateFileMappingA (hFile=0xed8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ae3, lpName=0x0) returned 0xeb0
	[0095.862] MapViewOfFile (hFileMappingObject=0xeb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.866] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.866] CloseHandle (hObject=0xeb0) returned 1
	[0095.866] GetCurrentThreadId () returned 0x1c50
	[0095.866] FlushFileBuffers (hFile=0xed8) returned 1
	[0095.869] CloseHandle (hObject=0xed8) returned 1
	[0095.869] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309705.jpg") returned 97
	[0095.869] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309705.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309705.jpg")) returned 1
	[0095.870] free (_Block=0x3285888) 
	[0095.870] RtlExitUserThread (Status=0x0) 

Thread:
	id = 757
	os_tid = 0x1c6c

	[0095.882] _alloca_probe () returned 0x40328a
	[0095.882] GetCurrentThreadId () returned 0x1c6c
	[0095.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", dwFileAttributes=0x80) returned 1
	[0095.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeb0
	[0095.884] GetFileSizeEx (in: hFile=0xeb0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=37146) returned 1
	[0095.884] CreateFileMappingA (hFile=0xeb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9123, lpName=0x0) returned 0xedc
	[0095.884] MapViewOfFile (hFileMappingObject=0xedc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.892] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.893] CloseHandle (hObject=0xedc) returned 1
	[0095.893] GetCurrentThreadId () returned 0x1c6c
	[0095.893] FlushFileBuffers (hFile=0xeb0) returned 1
	[0095.896] CloseHandle (hObject=0xeb0) returned 1
	[0095.896] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313896.jpg") returned 97
	[0095.896] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313896.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313896.jpg")) returned 1
	[0095.897] free (_Block=0x32888a0) 
	[0095.897] RtlExitUserThread (Status=0x0) 

Thread:
	id = 758
	os_tid = 0x1c70

	[0095.899] _alloca_probe () returned 0x40328a
	[0095.900] GetCurrentThreadId () returned 0x1c70
	[0095.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", dwFileAttributes=0x80) returned 1
	[0095.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xedc
	[0095.901] GetFileSizeEx (in: hFile=0xedc, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=42842) returned 1
	[0095.901] CreateFileMappingA (hFile=0xedc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa763, lpName=0x0) returned 0xee0
	[0095.901] MapViewOfFile (hFileMappingObject=0xee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.910] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.911] CloseHandle (hObject=0xee0) returned 1
	[0095.911] GetCurrentThreadId () returned 0x1c70
	[0095.911] FlushFileBuffers (hFile=0xedc) returned 1
	[0095.913] CloseHandle (hObject=0xedc) returned 1
	[0095.914] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313965.jpg") returned 97
	[0095.914] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313965.jpg")) returned 1
	[0095.914] free (_Block=0x32898a8) 
	[0095.914] RtlExitUserThread (Status=0x0) 

Thread:
	id = 759
	os_tid = 0x1c74

	[0095.917] _alloca_probe () returned 0x40328a
	[0095.918] GetCurrentThreadId () returned 0x1c74
	[0095.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", dwFileAttributes=0x80) returned 1
	[0095.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee0
	[0095.919] GetFileSizeEx (in: hFile=0xee0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=33195) returned 1
	[0095.919] CreateFileMappingA (hFile=0xee0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x81b5, lpName=0x0) returned 0xee4
	[0095.919] MapViewOfFile (hFileMappingObject=0xee4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.926] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.926] CloseHandle (hObject=0xee4) returned 1
	[0095.926] GetCurrentThreadId () returned 0x1c74
	[0095.926] FlushFileBuffers (hFile=0xee0) returned 1
	[0095.930] CloseHandle (hObject=0xee0) returned 1
	[0095.930] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313970.jpg") returned 97
	[0095.930] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313970.jpg")) returned 1
	[0095.931] free (_Block=0x328c8c0) 
	[0095.931] RtlExitUserThread (Status=0x0) 

Thread:
	id = 760
	os_tid = 0x1c78

	[0095.927] _alloca_probe () returned 0x40328a
	[0095.928] GetCurrentThreadId () returned 0x1c78
	[0095.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", dwFileAttributes=0x80) returned 1
	[0095.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee8
	[0095.929] GetFileSizeEx (in: hFile=0xee8, lpFileSize=0x33eff5c | out: lpFileSize=0x33eff5c*=47569) returned 1
	[0095.930] CreateFileMappingA (hFile=0xee8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb9d1, lpName=0x0) returned 0xeec
	[0095.930] MapViewOfFile (hFileMappingObject=0xeec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.941] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.941] CloseHandle (hObject=0xeec) returned 1
	[0095.941] GetCurrentThreadId () returned 0x1c78
	[0095.941] FlushFileBuffers (hFile=0xee8) returned 1
	[0096.621] CloseHandle (hObject=0xee8) returned 1
	[0096.621] _swprintf (in: param_1=0x33e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313974.jpg") returned 97
	[0096.621] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313974.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313974.jpg")) returned 1
	[0096.622] free (_Block=0x3285888) 
	[0096.622] RtlExitUserThread (Status=0x0) 

Thread:
	id = 761
	os_tid = 0x1c7c

	[0095.944] _alloca_probe () returned 0x40328a
	[0095.945] GetCurrentThreadId () returned 0x1c7c
	[0095.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", dwFileAttributes=0x80) returned 1
	[0095.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee0
	[0095.945] GetFileSizeEx (in: hFile=0xee0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=16626) returned 1
	[0095.945] CreateFileMappingA (hFile=0xee0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40f3, lpName=0x0) returned 0xef0
	[0095.946] MapViewOfFile (hFileMappingObject=0xef0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.949] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.949] CloseHandle (hObject=0xef0) returned 1
	[0095.949] GetCurrentThreadId () returned 0x1c7c
	[0095.949] FlushFileBuffers (hFile=0xee0) returned 1
	[0095.951] CloseHandle (hObject=0xee0) returned 1
	[0095.951] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0314068.jpg") returned 97
	[0095.951] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0314068.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0314068.jpg")) returned 1
	[0095.952] free (_Block=0x32898a8) 
	[0095.952] RtlExitUserThread (Status=0x0) 

Thread:
	id = 762
	os_tid = 0x1c80

	[0095.955] _alloca_probe () returned 0x40328a
	[0095.955] GetCurrentThreadId () returned 0x1c80
	[0095.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", dwFileAttributes=0x80) returned 1
	[0095.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xef0
	[0095.956] GetFileSizeEx (in: hFile=0xef0, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=19202) returned 1
	[0095.956] CreateFileMappingA (hFile=0xef0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4b03, lpName=0x0) returned 0xef4
	[0095.957] MapViewOfFile (hFileMappingObject=0xef4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0095.961] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0095.961] CloseHandle (hObject=0xef4) returned 1
	[0095.961] GetCurrentThreadId () returned 0x1c80
	[0095.961] FlushFileBuffers (hFile=0xef0) returned 1
	[0095.964] CloseHandle (hObject=0xef0) returned 1
	[0095.964] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315580.jpg") returned 97
	[0095.964] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315580.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0315580.jpg")) returned 1
	[0095.965] free (_Block=0x328c8c0) 
	[0095.965] RtlExitUserThread (Status=0x0) 

Thread:
	id = 763
	os_tid = 0x1c84

	[0096.403] _alloca_probe () returned 0x40328a
	[0096.404] GetCurrentThreadId () returned 0x1c84
	[0096.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", dwFileAttributes=0x80) returned 1
	[0096.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0096.405] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x352ff5c | out: lpFileSize=0x352ff5c*=16954) returned 1
	[0096.405] CreateFileMappingA (hFile=0x32c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4243, lpName=0x0) returned 0xef0
	[0096.405] MapViewOfFile (hFileMappingObject=0xef0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0096.408] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0096.409] CloseHandle (hObject=0xef0) returned 1
	[0096.409] GetCurrentThreadId () returned 0x1c84
	[0096.409] FlushFileBuffers (hFile=0x32c) returned 1
	[0096.411] CloseHandle (hObject=0x32c) returned 1
	[0096.411] _swprintf (in: param_1=0x3529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315612.jpg") returned 97
	[0096.411] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315612.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0315612.jpg")) returned 1
	[0096.412] free (_Block=0x328d8c8) 
	[0096.412] RtlExitUserThread (Status=0x0) 

Thread:
	id = 764
	os_tid = 0x1c8c

	[0096.552] _alloca_probe () returned 0x40328a
	[0096.553] GetCurrentThreadId () returned 0x1c8c
	[0096.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", dwFileAttributes=0x80) returned 1
	[0096.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0096.554] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x302ff5c | out: lpFileSize=0x302ff5c*=9431) returned 1
	[0096.554] CreateFileMappingA (hFile=0x340, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24dd, lpName=0x0) returned 0x32c
	[0096.554] MapViewOfFile (hFileMappingObject=0x32c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0096.557] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0096.557] CloseHandle (hObject=0x32c) returned 1
	[0096.557] GetCurrentThreadId () returned 0x1c8c
	[0096.557] FlushFileBuffers (hFile=0x340) returned 1
	[0096.559] CloseHandle (hObject=0x340) returned 1
	[0096.559] _swprintf (in: param_1=0x3029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0321179.jpg") returned 97
	[0096.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0321179.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0321179.jpg")) returned 1
	[0096.560] free (_Block=0x328c8c0) 
	[0096.560] RtlExitUserThread (Status=0x0) 

Thread:
	id = 765
	os_tid = 0x1c9c

	[0096.563] _alloca_probe () returned 0x40328a
	[0096.563] GetCurrentThreadId () returned 0x1c9c
	[0096.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", dwFileAttributes=0x80) returned 1
	[0096.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0096.564] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=12896) returned 1
	[0096.564] CreateFileMappingA (hFile=0x32c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3260, lpName=0x0) returned 0xef0
	[0096.564] MapViewOfFile (hFileMappingObject=0xef0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0096.567] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0096.567] CloseHandle (hObject=0xef0) returned 1
	[0096.567] GetCurrentThreadId () returned 0x1c9c
	[0096.567] FlushFileBuffers (hFile=0x32c) returned 1
	[0096.570] CloseHandle (hObject=0x32c) returned 1
	[0096.571] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0337280.jpg") returned 97
	[0096.571] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0337280.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0337280.jpg")) returned 1
	[0096.573] free (_Block=0x3287898) 
	[0096.573] RtlExitUserThread (Status=0x0) 

Thread:
	id = 766
	os_tid = 0x1ca0

	[0096.569] _alloca_probe () returned 0x40328a
	[0096.570] GetCurrentThreadId () returned 0x1ca0
	[0096.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", dwFileAttributes=0x80) returned 1
	[0096.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xef4
	[0096.572] GetFileSizeEx (in: hFile=0xef4, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=10196) returned 1
	[0096.572] CreateFileMappingA (hFile=0xef4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x27d7, lpName=0x0) returned 0xef8
	[0096.572] MapViewOfFile (hFileMappingObject=0xef8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0096.575] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0096.575] CloseHandle (hObject=0xef8) returned 1
	[0096.575] GetCurrentThreadId () returned 0x1ca0
	[0096.575] FlushFileBuffers (hFile=0xef4) returned 1
	[0096.577] CloseHandle (hObject=0xef4) returned 1
	[0096.578] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341328.jpg") returned 97
	[0096.578] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341328.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341328.jpg")) returned 1
	[0096.578] free (_Block=0x32898a8) 
	[0096.578] RtlExitUserThread (Status=0x0) 

Thread:
	id = 767
	os_tid = 0x1ca4

	[0096.633] _alloca_probe () returned 0x40328a
	[0096.633] GetCurrentThreadId () returned 0x1ca4
	[0096.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", dwFileAttributes=0x80) returned 1
	[0096.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee8
	[0096.634] GetFileSizeEx (in: hFile=0xee8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=11485) returned 1
	[0096.634] CreateFileMappingA (hFile=0xee8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ce9, lpName=0x0) returned 0xef4
	[0096.634] MapViewOfFile (hFileMappingObject=0xef4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0096.638] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0096.638] CloseHandle (hObject=0xef4) returned 1
	[0096.638] GetCurrentThreadId () returned 0x1ca4
	[0096.638] FlushFileBuffers (hFile=0xee8) returned 1
	[0096.640] CloseHandle (hObject=0xee8) returned 1
	[0096.640] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341344.jpg") returned 97
	[0096.640] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341344.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341344.jpg")) returned 1
	[0096.641] free (_Block=0x328c8c0) 
	[0096.641] RtlExitUserThread (Status=0x0) 

Thread:
	id = 768
	os_tid = 0x1cac

	[0096.642] _alloca_probe () returned 0x40328a
	[0096.643] GetCurrentThreadId () returned 0x1cac
	[0096.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", dwFileAttributes=0x80) returned 1
	[0096.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee8
	[0096.643] GetFileSizeEx (in: hFile=0xee8, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=19565) returned 1
	[0096.643] CreateFileMappingA (hFile=0xee8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c79, lpName=0x0) returned 0xef8
	[0096.646] MapViewOfFile (hFileMappingObject=0xef8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0096.650] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0096.651] CloseHandle (hObject=0xef8) returned 1
	[0096.651] GetCurrentThreadId () returned 0x1cac
	[0096.651] FlushFileBuffers (hFile=0xee8) returned 1
	[0096.657] CloseHandle (hObject=0xee8) returned 1
	[0096.657] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341439.jpg") returned 97
	[0096.657] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341439.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341439.jpg")) returned 1
	[0096.658] free (_Block=0x3285888) 
	[0096.658] RtlExitUserThread (Status=0x0) 

Thread:
	id = 769
	os_tid = 0x1cb0

	[0096.702] _alloca_probe () returned 0x40328a
	[0096.702] GetCurrentThreadId () returned 0x1cb0
	[0096.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", dwFileAttributes=0x80) returned 1
	[0096.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xef8
	[0096.704] GetFileSizeEx (in: hFile=0xef8, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=19160) returned 1
	[0096.704] CreateFileMappingA (hFile=0xef8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4adf, lpName=0x0) returned 0x32c
	[0096.704] MapViewOfFile (hFileMappingObject=0x32c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0096.708] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0096.708] CloseHandle (hObject=0x32c) returned 1
	[0096.708] GetCurrentThreadId () returned 0x1cb0
	[0096.708] FlushFileBuffers (hFile=0xef8) returned 1
	[0096.710] CloseHandle (hObject=0xef8) returned 1
	[0096.710] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341447.jpg") returned 97
	[0096.710] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341447.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341447.jpg")) returned 1
	[0096.711] free (_Block=0x328c8c0) 
	[0096.711] RtlExitUserThread (Status=0x0) 

Thread:
	id = 770
	os_tid = 0x1cb4

	[0096.818] _alloca_probe () returned 0x40328a
	[0096.818] GetCurrentThreadId () returned 0x1cb4
	[0096.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", dwFileAttributes=0x80) returned 1
	[0096.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0096.819] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=21187) returned 1
	[0096.819] CreateFileMappingA (hFile=0x32c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x52c5, lpName=0x0) returned 0xefc
	[0096.819] MapViewOfFile (hFileMappingObject=0xefc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0096.826] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0096.826] CloseHandle (hObject=0xefc) returned 1
	[0096.826] GetCurrentThreadId () returned 0x1cb4
	[0096.826] FlushFileBuffers (hFile=0x32c) returned 1
	[0096.830] CloseHandle (hObject=0x32c) returned 1
	[0096.830] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341448.jpg") returned 97
	[0096.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341448.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341448.jpg")) returned 1
	[0096.831] free (_Block=0x3285888) 
	[0096.831] RtlExitUserThread (Status=0x0) 

Thread:
	id = 771
	os_tid = 0x1cc8

	[0096.828] _alloca_probe () returned 0x40328a
	[0096.828] GetCurrentThreadId () returned 0x1cc8
	[0096.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", dwFileAttributes=0x80) returned 1
	[0096.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf00
	[0096.830] GetFileSizeEx (in: hFile=0xf00, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=29783) returned 1
	[0096.830] CreateFileMappingA (hFile=0xf00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x745d, lpName=0x0) returned 0xf04
	[0096.830] MapViewOfFile (hFileMappingObject=0xf04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0096.837] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0096.837] CloseHandle (hObject=0xf04) returned 1
	[0096.837] GetCurrentThreadId () returned 0x1cc8
	[0096.837] FlushFileBuffers (hFile=0xf00) returned 1
	[0096.839] CloseHandle (hObject=0xf00) returned 1
	[0096.839] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341455.jpg") returned 97
	[0096.839] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341455.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341455.jpg")) returned 1
	[0096.840] free (_Block=0x328c8c0) 
	[0096.840] RtlExitUserThread (Status=0x0) 

Thread:
	id = 772
	os_tid = 0x1ccc

	[0096.841] _alloca_probe () returned 0x40328a
	[0096.842] GetCurrentThreadId () returned 0x1ccc
	[0096.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", dwFileAttributes=0x80) returned 1
	[0096.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf04
	[0096.842] GetFileSizeEx (in: hFile=0xf04, lpFileSize=0x306ff5c | out: lpFileSize=0x306ff5c*=43490) returned 1
	[0096.842] CreateFileMappingA (hFile=0xf04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa9e3, lpName=0x0) returned 0x32c
	[0096.842] MapViewOfFile (hFileMappingObject=0x32c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0096.851] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0096.851] CloseHandle (hObject=0x32c) returned 1
	[0096.851] GetCurrentThreadId () returned 0x1ccc
	[0096.851] FlushFileBuffers (hFile=0xf04) returned 1
	[0096.858] CloseHandle (hObject=0xf04) returned 1
	[0096.858] _swprintf (in: param_1=0x3069f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341475.jpg") returned 97
	[0096.858] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341475.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341475.jpg")) returned 1
	[0096.859] free (_Block=0x3285888) 
	[0096.859] RtlExitUserThread (Status=0x0) 

Thread:
	id = 773
	os_tid = 0x1cd0

	[0096.852] _alloca_probe () returned 0x40328a
	[0096.853] GetCurrentThreadId () returned 0x1cd0
	[0096.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", dwFileAttributes=0x80) returned 1
	[0096.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0096.853] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=16099) returned 1
	[0096.853] CreateFileMappingA (hFile=0x32c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3ee5, lpName=0x0) returned 0xf0c
	[0096.853] MapViewOfFile (hFileMappingObject=0xf0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x530000
	[0096.857] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1
	[0096.857] CloseHandle (hObject=0xf0c) returned 1
	[0096.858] GetCurrentThreadId () returned 0x1cd0
	[0096.858] FlushFileBuffers (hFile=0x32c) returned 1
	[0096.861] CloseHandle (hObject=0x32c) returned 1
	[0096.861] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341499.jpg") returned 97
	[0096.861] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341499.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341499.jpg")) returned 1
	[0096.862] free (_Block=0x328d8c8) 
	[0096.862] RtlExitUserThread (Status=0x0) 

Thread:
	id = 774
	os_tid = 0x1cd4

	[0096.863] _alloca_probe () returned 0x40328a
	[0096.864] GetCurrentThreadId () returned 0x1cd4
	[0096.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", dwFileAttributes=0x80) returned 1
	[0096.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf04
	[0096.865] GetFileSizeEx (in: hFile=0xf04, lpFileSize=0x254ff5c | out: lpFileSize=0x254ff5c*=8074) returned 1
	[0096.865] CreateFileMappingA (hFile=0xf04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f93, lpName=0x0) returned 0xf0c
	[0096.865] MapViewOfFile (hFileMappingObject=0xf0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2690000
	[0096.867] UnmapViewOfFile (lpBaseAddress=0x2690000) returned 1
	[0096.867] CloseHandle (hObject=0xf0c) returned 1
	[0096.867] GetCurrentThreadId () returned 0x1cd4
	[0096.867] FlushFileBuffers (hFile=0xf04) returned 1
	[0096.869] CloseHandle (hObject=0xf04) returned 1
	[0096.869] _swprintf (in: param_1=0x2549f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341534.jpg") returned 97
	[0096.869] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341534.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341534.jpg")) returned 1
	[0096.869] free (_Block=0x32888a0) 
	[0096.870] RtlExitUserThread (Status=0x0) 

Process:
	id = "4"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x7de8000"
	os_pid = "0x6d8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0xde0"
	cmd_line = "\"C:\\WINDOWS\\system32\\VSSADMIN.EXE\" Delete Shadows /All /Quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 31
	os_tid = 0x12f4


Thread:
	id = 38
	os_tid = 0xe70


Thread:
	id = 90
	os_tid = 0xab4


Thread:
	id = 120
	os_tid = 0xf84


Thread:
	id = 121
	os_tid = 0xd9c


Process:
	id = "5"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x5e449000"
	os_pid = "0xfb8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "4"
	os_parent_pid = "0x6d8"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 33
	os_tid = 0x112c


Thread:
	id = 34
	os_tid = 0xfb4


Thread:
	id = 35
	os_tid = 0xfb0


Thread:
	id = 36
	os_tid = 0xfa0


Thread:
	id = 37
	os_tid = 0xf90


Process:
	id = "6"
	image_name = "wbadmin.exe"
	filename = "c:\\windows\\system32\\wbadmin.exe"
	page_root = "0x7301000"
	os_pid = "0x130c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0xde0"
	cmd_line = "\"C:\\WINDOWS\\system32\\wbadmin.exe\" delete backup -keepVersions:0 -quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 39
	os_tid = 0x1310


Thread:
	id = 69
	os_tid = 0x1374


Thread:
	id = 89
	os_tid = 0xac0


Thread:
	id = 234
	os_tid = 0x1478


Thread:
	id = 235
	os_tid = 0x147c


Process:
	id = "7"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x187aa000"
	os_pid = "0x864"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0x130c"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 41
	os_tid = 0x1274


Thread:
	id = 42
	os_tid = 0x1364


Thread:
	id = 45
	os_tid = 0x1368


Thread:
	id = 50
	os_tid = 0x1340


Thread:
	id = 51
	os_tid = 0x132c


Process:
	id = "8"
	image_name = "wbadmin.exe"
	filename = "c:\\windows\\system32\\wbadmin.exe"
	page_root = "0x1890c000"
	os_pid = "0x137c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0xde0"
	cmd_line = "\"C:\\WINDOWS\\system32\\wbadmin.exe\" delete systemstatebackup -keepVersions:0 -quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 46
	os_tid = 0x1350


Thread:
	id = 101
	os_tid = 0xd7c


Process:
	id = "9"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x1893b000"
	os_pid = "0x1330"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "8"
	os_parent_pid = "0x137c"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 47
	os_tid = 0x1338


Thread:
	id = 48
	os_tid = 0x1370


Thread:
	id = 54
	os_tid = 0x1348


Thread:
	id = 77
	os_tid = 0x12e4


Thread:
	id = 79
	os_tid = 0x520


Process:
	id = "10"
	image_name = "wbengine.exe"
	filename = "c:\\windows\\system32\\wbengine.exe"
	page_root = "0x1a4f4000"
	os_pid = "0x1480"
	os_integrity_level = "0x4000"
	os_privileges = "0x20860100"
	monitor_reason = "rpc_server"
	parent_id = "6"
	os_parent_pid = "0x23c"
	cmd_line = "\"C:\\WINDOWS\\system32\\wbengine.exe\""
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\wbengine" [0xe], "NT AUTHORITY\\Logon Session 00000000:0007d4ae" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 721
	os_tid = 0x1bd0


Thread:
	id = 722
	os_tid = 0x1bbc


Thread:
	id = 723
	os_tid = 0x1bb8


Thread:
	id = 724
	os_tid = 0x1bac


Thread:
	id = 725
	os_tid = 0x1500


Thread:
	id = 726
	os_tid = 0x14e8


Thread:
	id = 727
	os_tid = 0x14cc


Thread:
	id = 728
	os_tid = 0x1484