sxidlt.exe
Windows Exe (x86-32)
Created at 2019-06-02T15:33:00
Remarks (1/1)
(0x2000002): The maximum VM disk space was reached. The analysis was terminated prematurely.
Monitored Processes
Behavior Information - Grouped by Category
Process #1: sxidlt.exe
56086
0
| Information | Value |
|---|---|
| ID | #1 |
| File Name | c:\users\fd1hvy\desktop\sxidlt.exe |
| Command Line | "C:\Users\FD1HVy\Desktop\sxidlt.exe" |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:00:34, Reason: Analysis Target |
| Unmonitor | End Time: 00:04:05, Reason: Terminated by Timeout |
| Monitor Duration | 00:03:30 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x7b8 |
| Parent PID | 0x860 (c:\windows\explorer.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
D3C
0x
4D8
0x
CFC
0x
DDC
|
Memory Dumps
| Name | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| sxidlt.exe | 0x00400000 | 0x006EFFFF | Content Changed | - | 32-bit | 0x005589E1, 0x0055F000, ... |
|
|
|
| sxidlt.exe | 0x00400000 | 0x006EFFFF | Relevant Image | - | 32-bit | - |
|
|
|
| buffer | 0x001F0000 | 0x001F7FFF | First Execution | - | 32-bit | 0x001F03E4 |
|
|
|
Dropped Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| C:\\588bce7c90097ed212\1025\[sysfrog@protonmail.com]eula.rtf.sysfrog | 7.39 KB |
MD5:
43f73819173388715fc3004d31f6f420
SHA1: 7515b1e8822cad140cd8defd9173330177fd7585 SHA256: 6cd26d706fe884608bd468e5ac85fd70a82af432efffe39233597d70e4b2b7a3 SSDeep: 192:G19qurVDOfmLyKwxeK6cB5oHBQ6AZg3wKEhWoc/bAX0Z:G193EmLj06c/qdqggKPvEkZ |
|
|
| C:\\588bce7c90097ed212\1041\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 66.64 KB |
MD5:
d3896ca6e3d12d1b54c7b65eba4955d0
SHA1: a223c9335c3944db571ad7384f183c509c7dcda8 SHA256: f39c3d16a169fa6649934f2584f728d0e1a332f85f78b93ca26d41855af44669 SSDeep: 1536:/Q4mgMi763Ki6mcOMPPq6RC2wwSmG/jRKvqQMAPnfyy:/Q4ZMEuNG/xtG/jsAA/p |
|
|
| C:\\588bce7c90097ed212\1044\[sysfrog@protonmail.com]eula.rtf.sysfrog | 2.98 KB |
MD5:
c2fec4cd6812edfa9c5a2409601c50a6
SHA1: 59878fe570ca29c1e60b61c0389f91013798a153 SHA256: 612e8767ec0d81194a93b1449c77bb27bf041b4541dd001949ba8b265f4f86b4 SSDeep: 48:iunMrcq/fu80rI+uR/OmS0gs2RDzxIHSZvM91XIE9OxR6fnZ3BjSqE2bVVQ4em:iunMoqORr/tDv4XPfZ3BjSqVb0Q |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]warn.ico.sysfrog | 9.91 KB |
MD5:
f3d993e9e67948b6b6a0b0f1ed227258
SHA1: fa0a008e70371a11b3cf07bc3da3a2451622d1ae SHA256: 7789aafc0c3c7cbed0d519f67319d4091f10970dd18cfcb55aee9e4952d51f9a SSDeep: 192:R/IClA3CWdNw4KwxzO9HJ5GeHlOjKXZoM1Xbuhh6vAZIiyE1uw/F7J01R8W:R/IFNA2S/lQeXVvIEqFO1SW |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Application.evtx.sysfrog | 68.02 KB |
MD5:
d4df6d6607fb29201984e5b544d92058
SHA1: 4910d34266787cb5b677792f91547736bd2a494d SHA256: 9fa774f07fb84893f853e0ab6b5d5046e2044b03c444ffa0d5dfefe54f127b1c SSDeep: 1536:NxEeu3MBdLNPEtdUVIojOnoh4x8oFDLcU5EbuvO2SZwFzcuvyG:q3WtlESnjOnQ6t/ebuw2f |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppReadiness%4Operational.evtx.sysfrog | 1.07 MB |
MD5:
7ef10af1eee57c63cf6ba7f07e2e7c4c
SHA1: e9b286bc5958b0cc3e3c19299fd0af635270e642 SHA256: 5af48a028252d159db77a40ec5ddc6d0394936c50da4aa73350218d24b3f6d89 SSDeep: 24576:DQx3VdRZL7O02u6Y1w5TblixWNLRsmvbiqtn5EfQ9BL+hr:DQxlT5Kg1STZNsJpfQPm |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-CodeIntegrity%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
ebbd725f60a8614ab20ccf7359960028
SHA1: 79ac41bf4e59e3e51f87e25a7ca74700a8b6e2d6 SHA256: 28cecbe8656e772056e302cc5c92edffb5e9aa5181cf9dcb7ff09c3c08b8f8ba SSDeep: 1536:a8SfS96+SgOK/ojwqUXLQYq8EJZpkBrxG5oFi:aE96+S7KQZYGJZp0rxG5Ei |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
1f292c2c385519aef5312b625ff63f88
SHA1: de25c750d3a63cab7c23812ba777001775b4604f SHA256: 2f49cbf95b42d41f5fcee36b813776835d2c03c970501bc5cf54c57bb1f82789 SSDeep: 1536:Im3727rjewK+0ihke34V9XGHpCgF6cXO5IF7EAUeH4TmwVhq:P372buguecZveJXMIFxH2Vw |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-GroupPolicy%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
80a706fc3b45c104e401e2c777e81d53
SHA1: ba4cf03efc1490cd414173380d40933a9536aea1 SHA256: 4efdfb8e090a5b7ac66dc041655e2a190e549e7e56042d5ee59b184705b66dc3 SSDeep: 1536:Ove9mwTuSxwHwhsxRaWC2p11YwkHvN2oI/EaiCTyBIsTkLk4WDE:Oveh/sxj7pPD8tIACTyBI3Lk4b |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-International%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
cfc6e1175f0e40b75ca744a1a6cbfb70
SHA1: cd78b8cb65b501d01d62deacb06c2e44921cddf2 SHA256: 9eba0206e03aa1716c5cd406daf2d7290db317c365f788fdd20eac1557b8c777 SSDeep: 1536:CrrLGsy+H4DfJKsy0Wov+HXMooqCOTqsMJJRHZkJ0:CjZ/50Ws+3TTqLq0 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Windows Defender%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
2e3638ea56e9a7eff992cebc6b889dca
SHA1: 0dc66395e75de7c75bbe4c9a46bf38e1a68d8f8a SHA256: 0b4947f7f62297eeba4ef98570bcb5730ec46c500adc077d26e7fd9693e1f38e SSDeep: 1536:uC109e5o3vSZadSn3kOOlKO5kvf91h9j1bWaXLN7XiaxPyhZ+awLFo/pvEQO:P5ovs3kDR5Y9d1HZX+h5KQO |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]classlist.sysfrog | 82.39 KB |
MD5:
48a3daec5e5d8828f67645a00e8977b1
SHA1: c5cb700b93d31c8aa973718734b4fffeafcb5500 SHA256: e2b3c8e9762eec4d37aaa4119ebe3687a254bd8e560b6a045c7a6573fc602921 SSDeep: 1536:9JvuxPPU8WvaOHY3SU6zyU6rADazUC/y4PoE44ip3x5fzib:9JmV88Wv/+6zkqiy4p4rphBeb |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]LINEAR_RGB.pf.sysfrog | 1.03 KB |
MD5:
ca9c8efb4a465d8194cf63abb31e0d25
SHA1: 8f6a56f75b3aca0fa5f4e33d54b07717a2844b08 SHA256: d2500a7a8e1969cf9010cfd7c89e207d1bd1bd5532abd1e3cef6ffd34cd3ebee SSDeep: 24:geolaTq2zTo3XWFKnqX8P8+3qZ/zsrFs+oTTCv7OdV:gBlKT0mFK6kGzOFs+oT8C |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ja.properties.sysfrog | 6.20 KB |
MD5:
7c6dda4b8009707e9cfde5657054dd17
SHA1: 05c581ad235e55cb66bfa5ea5e3dc37c87160d8f SHA256: bb677959a960e5cd1e049dacf2af000b6ccd2039d2e7acabd8424ebffa6fe754 SSDeep: 192:nD7Vx/SJ7WReX/l9q+VdAxe0BTtu26aq+OY:nDf/SJqRu/lw+VdSjebTnY |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]nashorn.jar.sysfrog | 1.93 MB |
MD5:
f90a5521ad7f0fe3f5388903f7063525
SHA1: 5f6b0fa655ca9932ef92480bf44d55ef916ec343 SHA256: 6f022485f613e0b87971574ffc898d63f7bfd0c56bf8fe97859de7596d1b5e72 SSDeep: 49152:8uqEIKXXGPi7sezR1zMj8/SQY3xmOTII4/+Dr1D11LBb//bcFhtkw7:OEHHGK7vzj4Q/SrI/IzDhD11LBb//bgD |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunmscapi.jar.sysfrog | 31.94 KB |
MD5:
3b2bbd8aceb201ea8ebd0aa1193425f6
SHA1: 166cfb98b47ba5b7856a74264addf0b71d3ea2f0 SHA256: 3adc5a4d48b34a82c947bffbb010764ba0b80893118fed866db24248c8b2c2e5 SSDeep: 768:4wfSWmw1nDBQ771xxFlmLFj9yIUb9gNI5TBTRY8odQpl:4wEEDBY71PmLFj9yIUbaS9adQn |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]zipfs.jar.sysfrog | 67.31 KB |
MD5:
42f1e0baea49954ba6496eeff794573d
SHA1: bd6f9f838c01be8ae9274ffc95249aef8e3f5cef SHA256: be3ffc723da3901112d8d145b1a459dfc4183aefc6124236d6c0108e28568843 SSDeep: 1536:mj4VKDyP8jsk7nYpLoVt2p4DXj/8MyWR7zIzcA:7VMyEjsCqL8tPTLJRnul |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightItalic.ttf.sysfrog | 78.97 KB |
MD5:
6f57c5c2441e70ed5c85eeed7391eaac
SHA1: a7828c78d5270351641bb2544c2d686e5d32ac97 SHA256: f0637d3bb72108615d35d056e1c78eb71f35e5055329700719f445fecea206d2 SSDeep: 1536:agOMr+rim60Zw85sOncYnr/9Qs4QX4tbnaO8xuJ9H0G1O77NV0NkXzYNOa:7TrcPJsQ39QsBIUG1O7xVuAa |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]cursors.properties.sysfrog | 1.27 KB |
MD5:
0baac82c21c307d64fda6b77e4af1303
SHA1: 85da05bcc24bf6370f79ae42c0674d6b822b13c4 SHA256: 9a6c5e59909b12893ac23dff5506955712d1e39f2d07887ca02078af2f1d5118 SSDeep: 24:UEHNEAQ2SHR8IKu9dSUIRlmZXz33Hc9mQPL23oqW3Sq9RyVP:4ANSHR8IKumUIPmh3cPLTGCoP |
|
|
| temps.key | 450 bytes |
MD5:
6e4df4a230f62f0af9066d018218eba6
SHA1: dbe9633e08d9f982ad71d552bffc3227ef2b7465 SHA256: 6289a5cbc6e1c7e591b2342d58c52c3af37334a89699d5f3e338f536326ef610 SSDeep: 12:LrL48tf6o8JJDk60IwIRP4VAZdSFLIgeKTh5bhVhO0:LrLH4oEnww4VAZdSFLIeH1Vr |
|
|
| c:/ProgramData/how_to_decrypt.txt | 984 bytes |
MD5:
96765b3e648f8526d61a3578b7a8036b
SHA1: 747f22368d5537cf51b676745b888bdffc161b5b SHA256: ceff657399c5bff7c9d97e2a4909bf4befb89d9b407f9ee0560527b1d3d1d282 SSDeep: 12:FnghMEzTcoWmUQAs++RvQ27Q5j3Gl1GozNvGeNzviRybJkqBfIEeztU9ztPizNBr:W0oLAsvYv2H3GeEiJVn5EGJGRMAYi |
|
|
| C:\\$GetCurrent\Logs\[sysfrog@protonmail.com]downlevel_2017_09_07_02_02_39_766.log.sysfrog | 41.69 KB |
MD5:
d7b95c59c216eedf37a5cdf8c0c36839
SHA1: 357e5ee68fc6c19732c3f2eccb0e46e84029db25 SHA256: 2005d4143c5312faa589342b9daffd6811475c2a599b150ea63c5e4ae20c78e2 SSDeep: 768:M6wZbdTcSmLubXuhqaXfmaBGdltB0eEolMCgM7/C2xfm:MHs6bW3X5YB0ekCR7xfm |
|
|
| C:\\$GetCurrent\Logs\[sysfrog@protonmail.com]oobe_2017_09_07_03_08_57_737.log.sysfrog | 5.88 KB |
MD5:
401a34343e0d3060a2bd9d5d0695f035
SHA1: bab1d5e45bf8ed41b96e8b7e36d4bdc85f5f6e19 SHA256: d1320fa593b30facc3528a9e6a7aa13f7c96ba675561f1b8b2ad0c5a970ad315 SSDeep: 96:0z6mUuhpKfdCXnyTg4PkewCkGcBUy37b59SWq8JzJiKRJQ5FYIgCuS4imo1U8:q/TydwyTg4PJqGd27b59Jq8JzJiKR9Xo |
|
|
| C:\\$GetCurrent\Logs\[sysfrog@protonmail.com]PartnerSetupCompleteResult.log.sysfrog | 48 bytes |
MD5:
c56a2c0df69a58e84a9780f0c6fde7b6
SHA1: 446fcec06b2b98c5927d83d6eb421737501611ac SHA256: 38ce8f07066611b0e79a27fcf3d739f979eb213f6dfe0d493861b00b4091c50e SSDeep: 3:wiMPrBKYcykAce3NJ:5wBKkkC3NJ |
|
|
| C:\\$GetCurrent\SafeOS\[sysfrog@protonmail.com]GetCurrentRollback.ini.sysfrog | 160 bytes |
MD5:
4fa078cd3a57799f6a2cacdfb1680753
SHA1: 6d0195f25b39627a731b06a12f1eb499fcb1dc82 SHA256: c73579d092ecb3cb6d7ca40c85c521a5c74deb117d96a153569326390a3de598 SSDeep: 3:tBIJ5/MuKF26INTLZalaikzUyKCvR+B3jCZdoIfS4lVYKuw6:t+J1SxwTLZa0TUhaR+B3ja8Gow6 |
|
|
| C:\\[sysfrog@protonmail.com]$WINRE_BACKUP_PARTITION.MARKER.sysfrog | 16 bytes |
MD5:
a565cf4ca8fa932bfed3da147802dfbf
SHA1: 1db454f7f75d5b3089e3e6cfc030db015b0e9a76 SHA256: 84c484ac042902e61a58e3f1c4d6c376d72c95ae208cdeca6d5733f2f79394c9 SSDeep: 3:CyJAAj:CMAAj |
|
|
| C:\\588bce7c90097ed212\1025\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 72.48 KB |
MD5:
abc2e4503ab5b6433073bd1672a6adf6
SHA1: 0e7f18cfe983c7e2998f45a69217e9210ddb3d63 SHA256: 6803b666e5bb44a18f8708b701d17a77bc8d5d095b2281df97bbb95a8cdd680d SSDeep: 1536:/mdbGbrcXPOOTeuLecT3RuJe2khc8EhRRLk2G4BFoV/u83QrYP:/GR280clge2q/EhRRLkb4BSV1MYP |
|
|
| C:\\588bce7c90097ed212\1029\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.64 KB |
MD5:
9a3c2a9d151507538d63912a582515b8
SHA1: 1105c6012726f23bc32ac9d47ed53834344e901c SHA256: a5e05f3ffc55ec1f174f119b088ea26b55b355418c1f45eb821c15eb66bb69ce SSDeep: 96:beCoUpLsiiEJtkb8MCxA82cZapiKP/tOzKeMU0Sj:bloS1wOArMKnIzK1nSj |
|
|
| C:\\588bce7c90097ed212\1029\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 79.08 KB |
MD5:
f3394bfee9b0d9f5722b9d7b2dd39cb3
SHA1: 8ffa4a115dd790bf143ee57fefdc56e97bbeb2db SHA256: 5be3463e69c70dac4cc2407999507495e25383ed9a993a546c62865f2116eb24 SSDeep: 1536:/IHKn2Pl4fpMPrSUVtDZc1cqkTJs1HG7Eyu70aHlmAv2sv:/IWDfpweUHZcClTmHGVa0CBvN |
|
|
| C:\\588bce7c90097ed212\1030\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.25 KB |
MD5:
4ad9ad92e0da1ab8f2b2aa3a78ffec8e
SHA1: 6c281fc2b3626e7a18c9eb1f94f6a2608f7d8f0d SHA256: f7d73e4dd40fc40a94685bbdc455fd481d43975eeede326758dcc97f8733d2d2 SSDeep: 96:Nrngex1yD1WJ5GoK07DGxCF5ITBlkR83tuGJqM5cPNJMn2nq:NrgA1y5hDy+CFQnkRhYqacFJM2q |
|
|
| C:\\588bce7c90097ed212\1030\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 75.94 KB |
MD5:
518d084cf46ebf7cd680fdfcacdf3d3b
SHA1: 5953d597603f8cbe20c26cc5345370ee1a185e1d SHA256: 048e8e09b132263de07725068ce01d102ae76ce412ba4f6d81c8fef441b769a1 SSDeep: 1536:/SoNPkkefKcPJl1VGaj5dRAOQAYPNd+YYR6kUzId4LdEfVP6LcHEU:/S7hHJl1VGaVPAOQAE+tU0uLmBkU |
|
|
| C:\\588bce7c90097ed212\1031\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.34 KB |
MD5:
8f6f3259089c7a2b05e18429ec16c295
SHA1: 233f255d3c5c256027324ea791bc278508a2b931 SHA256: 6c83a19be66fa047da46c3aa910d62e0ed22b2b09893d757e6e71fbe7269d53b SSDeep: 96:/s1xvSDHKL1p9xBhk11Eu3qMNmjdGXWWlr:0rvSDKxzUrq1jdGmWt |
|
|
| C:\\588bce7c90097ed212\1031\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 80.42 KB |
MD5:
e82e6f54ac073f376d624c70f4cb9e17
SHA1: 0fe7f9d024d1089e9793dfd4590debe3bd77426e SHA256: 118eb52cd6a85fd3c360d6a45f83cf9956016d691b1cdfccaa8b73e19a614d39 SSDeep: 1536:/gMbg02z4Y2IIbOw2UHEc+x60F+6nVEOt5vTcNUm4bUC02e1KuSfwTgHFaL0z67B:/gM809OtUHEc+x60FvnT3bcJiPOSS04P |
|
|
| C:\\588bce7c90097ed212\1032\[sysfrog@protonmail.com]eula.rtf.sysfrog | 8.67 KB |
MD5:
41d1b7cce4e07aac4534a6011eb6b9ae
SHA1: b68c8937c54d8d25ab28a982c1699f13414798e5 SHA256: 9d0f1cfdffe28f8a56bae32df3737fddcdf68247c872def9e1171ea998497b49 SSDeep: 192:XufuuD2y+0Olqqf3QAgCWvvJuY/EJg7ZntmDa9eJiy:XuWBy+0CqO3QJCUJuVJ+P9egy |
|
|
| C:\\588bce7c90097ed212\1032\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 84.27 KB |
MD5:
b0e1a812cd1a14a79aea4c37c266dbb8
SHA1: 1b01f7e1762ea1a9d1344dc405ed090119c0167a SHA256: ec6536e50959cd64d42e09fe4e1ea302e51e5a796910c61961ad3a75be600693 SSDeep: 1536:/9si/F8gDo2VVMBgihqiOPNhGeZa3ZsOuLRIImDNTlw/SNf3Q0Y:/vqZ2VVMBgiBeZaHcRgDM/SR3VY |
|
|
| C:\\588bce7c90097ed212\1033\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.12 KB |
MD5:
135d55059f6e9dce099d739dcb8636cd
SHA1: ab3903e299c80b3fc9d5db9a0bcb780220ccf22c SHA256: 46f4239cfad0959f6d26e58c3bcc6d571b645413373a90b7943da579335af49d SSDeep: 48:RWBTJoYzkp5s+4tybGDvZThVKNcP8GJ4A2WAJpPoZsFneUcGhng1rAM3KE1UMrm/:RW5JTIT4QbIBbwWSF7TcGhirL39p9G |
|
|
| C:\\588bce7c90097ed212\1033\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 75.44 KB |
MD5:
f88d733809496e6ccefac6917ca58fe3
SHA1: ef7c9e846d2bdbd09f6e7762270fcdc3452d0f46 SHA256: 8d0d6d1cde729b2a8433485c80b24e3befe5a9f16be45d37179ec2d2f683dbb0 SSDeep: 1536:/W5l6SJ0WWyn8x0NAemPPCk3+HzqnFaTXopLdZ3IWiH9ozvvSlYo:/W5lYWWStTYPChTqErox3xi9uSlYo |
|
|
| C:\\588bce7c90097ed212\1035\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.62 KB |
MD5:
de54f6262df6c9918500da7c6e0cf5e8
SHA1: 2254707c2fd74be7c862f24bcb2fcbb93b3f8cc8 SHA256: 37eef11a91315d34319b04fb2c01aaba8090694c8537bb13304e2a957fbb0417 SSDeep: 96:/ZObe5mr3srx2OnkAN6A/W2jfuxiqw9R0bd2tbxW:JmAl2Onks6QW2jfhRQd2JM |
|
|
| C:\\588bce7c90097ed212\1035\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 75.22 KB |
MD5:
e682d8ae763dcee070d5f2467133bc47
SHA1: c12f50cc99450499c434924a81edaf492889061e SHA256: fa48d606893ccbf969450a66d8b1721e82a529c909c908835221ede71e8d67e6 SSDeep: 1536:/jfxGaSkn7zYfOV2nKIXgRW1ud8JgcMhu7MUvv6WihVnQ5G24Hz6:/jsLk7zYcIwRW1udgAjUvv6LKGfHW |
|
|
| C:\\588bce7c90097ed212\1036\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.45 KB |
MD5:
b872f8ff05a739ffeeb074d20712d2c9
SHA1: d6432784ed96dac75283d9f5b9262cc1c1a55f31 SHA256: 4e26a52de667baf1d0c41c10bec0791258845279b51a0bf14564a355786733ce SSDeep: 96:NrngexfG5Iq68wzB5g8XrqRo5zrXw+uHC5PZwcY:NrgAu5axbY0w+0C5PWcY |
|
|
| C:\\588bce7c90097ed212\1036\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 81.03 KB |
MD5:
dfe19dd286bf26e8142531d63a92fcbc
SHA1: 39805f8369058eeab07d4efc55568d15ea6ccf8a SHA256: 6759e33eb48dbdd8e6dfc840b99628b62b253a3d3346d25346ba016df20286ca SSDeep: 1536:/A56LugHcsaohZqPF5iYirBBR9ccxk+P+j6IEpRB/oHg9:/A5hw25iYyKQ+jUPB/MA |
|
|
| C:\\588bce7c90097ed212\1037\[sysfrog@protonmail.com]eula.rtf.sysfrog | 6.70 KB |
MD5:
e926e7abd46de9bd931cda30630dff34
SHA1: 13a225bf933fc27d6ee696099fed963a1b4fa449 SHA256: 0be0165e1139750bf283d5704555cc8783fc95dfa5dfd813afb4f6bcffc3d58d SSDeep: 192:3ov9xIwj5Q5BxloTYPfERsQRvXsdThiyPGnR7znnV3K:YvYw9Q5BxloAhefCiyP8Rvnnc |
|
|
| C:\\588bce7c90097ed212\1037\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 70.39 KB |
MD5:
5c59eb138a2aad01f450447837632836
SHA1: 834f08e716ff3cc17088d9ac49ef031a31aabfe5 SHA256: 9128189d136883a33004e46e79b2a6b0768941506f3baab2da9b18443129c8fd SSDeep: 1536:/3L8Lfjxh86zZOK0F/vAdE09P4ShefnN13B6iNUVd4hVHYUoY:/8r06VOKm4dV9PNUfNlBt2d4hVHYrY |
|
|
| C:\\588bce7c90097ed212\1038\[sysfrog@protonmail.com]eula.rtf.sysfrog | 4.16 KB |
MD5:
766dda6bf48f9e0a4012e4e0c190b38f
SHA1: 1568a557f4950b93bad86e8fdedee2f32bc91667 SHA256: dedc81bd63e9b29a9ed62e7db178db64f8ad52b242e098de5a9cb87a1578e473 SSDeep: 96:df9GeUms2yT+BXT3gQq5duVOBsB+WJP4Ymsqew:pXXyUch3eyW+WJP4/ow |
|
|
| C:\\588bce7c90097ed212\1038\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 84.42 KB |
MD5:
773ab58383e17b57d0ade4cf0f2ba0c6
SHA1: cf92e9cc385eee68b86baa8b2e73be7e12842fc2 SHA256: 51073692dffb64d759ae2896d48a5489d65901080e0265794d702c703ae679df SSDeep: 1536:/lQ4P/eJwpGct67HHLaDsQi6nGoNbpkzZwZXw/q5c2OPrC+lrxekr:/X2JV7nLH6Ggp4whwSgzLlVekr |
|
|
| C:\\588bce7c90097ed212\1040\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.56 KB |
MD5:
0b78c880ecd5f0b1185ad6d740a2f573
SHA1: d43a8c6deb4684f6fbe4deb8798ab90a4a79ce81 SHA256: 862e66ba6b2dbc8f3cae1ef0a3bcd416782c62c1ddff67205bf012e0c69714f5 SSDeep: 96:eiygugGTGGyF1xpbFa+6QOgARBLRJ6crCI1/StOGfyTB:eiagG6fj/pFOgAPz1GeqtOGfwB |
|
|
| C:\\588bce7c90097ed212\1040\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 78.19 KB |
MD5:
b8df49f4a140ae45c52c962711150a06
SHA1: 95691641e9875aa3e6f85d37af50101bb1f56a44 SHA256: 69b79bff6fe9534987a246bf7008468c362aab867a5b523cd7c0d65c70a19196 SSDeep: 1536:/joTCaL4X+X4bfkV5VOtjFnzuaxIACYN6/g7Q/Nf9mf+9dRW/oTfQ5w:/mtL4uX4bMf0tFnDg0g/u+9dA/gF |
|
|
| C:\\588bce7c90097ed212\1041\[sysfrog@protonmail.com]eula.rtf.sysfrog | 9.89 KB |
MD5:
1871c952ef570ff16532337be9935d43
SHA1: 6e09eba0fb766e05dc095c4e2ca22ab498e161e9 SHA256: faf063fdc32d05925e4f8428ac33d1c1060f880b8e632065046014e4950eed5e SSDeep: 192:8kdM/Y0QH8W/sA8/lI+/zabONMbFO5KyRFSOMEpg0ft7cfO5B:8j+l/ALbsgUyjSO7pg0ftAOD |
|
|
| C:\\588bce7c90097ed212\1042\[sysfrog@protonmail.com]eula.rtf.sysfrog | 12.39 KB |
MD5:
3ed84c5b81cb7d8d8812963449e13699
SHA1: a39aa0cd565c3bddf17a0abda11d8737a5b8afe6 SHA256: 079706749d2e0d8c5468f74197f67c16a769d033a6358857f7f8b7789b15856b SSDeep: 384:VcrI/BSiYsZV2m13lsT7aTEgqrGpNOfwQIj9oGCHZ9:LdZV2m13WT6Egqqjj92HZ9 |
|
|
| C:\\588bce7c90097ed212\1042\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 63.72 KB |
MD5:
80ed89a4b52e5f3cccf5a33dd3070cc5
SHA1: 1b72ba15eceb80efc7e1039cd664aa6b087d805a SHA256: 3a52f7509d72f2ffd06bd889f0b8e1646ba1bfd8fddddea4e2df8436d9cf0743 SSDeep: 1536:/Xg3WMowLU6oiaJwCKpB4c7nlg58vDtTH:/X4bU6oia+CIaTw1 |
|
|
| C:\\588bce7c90097ed212\1043\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.47 KB |
MD5:
e2a0995199fff2411e0f0f23cde645e8
SHA1: 69bfde12cecbfdc12b9df0b145afccb0d97e9d37 SHA256: b94f95027527dd0e91cc6e52866d391ee4c74e460e6130bf76f68f2d2a46f3c2 SSDeep: 96:+LVOSpnspzhcIVpWs/V2qmLZ3aKYnQAZ+hJF2:+LVO0n8xVpWs/V2qm1qKYDshJF2 |
|
|
| C:\\588bce7c90097ed212\1043\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 77.78 KB |
MD5:
dd07ec21e2cb955406dc9ca588b10cc0
SHA1: f790e9d25509fd397dda12be9b7453b06eb229e2 SHA256: 362e85e22a76c341feda86e78f39cf62664b7cf2d26d684f076cb18e15f09872 SSDeep: 1536:/n1edyu9z44up/LYylmSv71OsFzMoARuXvdua3luHqZO2DtO8MPF:/17u1uR55v8AMoGuX531YmOlPF |
|
|
| C:\\588bce7c90097ed212\1044\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 77.45 KB |
MD5:
a06d9ad016ef1e3ca8427809fd6f782f
SHA1: 7dca2724ed48a8f3e035218c2d3fdb95a4b4e92c SHA256: 1e1cb2770e5c4eeba9648adc58f8237d66f15dbce1aa1d3021d0a76676cc4a20 SSDeep: 1536:/QyU8/qI77M7gecw/7Z17lVH37+5rovIICMn7HSTrffu0Fc5JIEoi2WX3y:/QZ8nHM7Dd17lVX7+5blFcrUGy |
|
|
| C:\\588bce7c90097ed212\1045\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.95 KB |
MD5:
0c9216069624a0402dec6350753bc1c2
SHA1: c26a87f08e40c25674c8ffdcd2ab0632094c7813 SHA256: d6348305a57819d0c10e6e1ef56f2e3cd79fa02b5d7fad392fa34acac2415e57 SSDeep: 96:3855L5jiW8ccnxmgZp+Io2k8uWtpXXO8Rn7UvZkvq/Tg04s1cj:C5FiL3EgZp+lBSpXpWZkvq/Tg0N1Q |
|
|
| C:\\588bce7c90097ed212\1045\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 80.45 KB |
MD5:
ead8d165ba6b5a566ac2f0fa368082eb
SHA1: 8322f84a64fb109eed88c736f2dc3084f25528f5 SHA256: 8bc2d5d1d1fe453ea970c079c38ccd0e311a3f03f86cd3c388902df2fd798999 SSDeep: 1536:/o7huR7zFpmHtfdESn995n2+i37Y3tLpqCrpVXoMhvQ0z8YgtziIjpNHcnce9GHr:/oMpmHdvkc3ZpdHoMhetziIjpacG+/D3 |
|
|
| C:\\588bce7c90097ed212\1046\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.61 KB |
MD5:
f803e52709745aa5933f0e5a2e46bd82
SHA1: 9cfee3439ad4a0e9b13577978971405e7da6651a SHA256: dfeac0bd3b0f374f43db3b6708e0c41f2cf99b2ebcfa7df5c3547a7851edc160 SSDeep: 96:pgXElscIgS1yCcy5XHYNppK2BlPu/pqLP2:pFlkguyCRtHcppfXPkpN |
|
|
| C:\\588bce7c90097ed212\1046\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 78.86 KB |
MD5:
04ae3e2694a90eb98bf3b9d11052bd17
SHA1: 83722f5e76be3248e920bd7bf77b377388c49b33 SHA256: a99c947b496fd07c15e43a2ca0eaedd01d3a0d186aad1759d1a5b6d8fb489429 SSDeep: 1536:/MU4+kFbikedNO2xoF+4UAaCHcq5oTw366Sr3OBE/U0kcR3gqjglZdp1UakWS+Mk:/MVANXok4Da86Tg66Sr3ZUYgk0ZOaKv4 |
|
|
| C:\\588bce7c90097ed212\1049\[sysfrog@protonmail.com]eula.rtf.sysfrog | 53.19 KB |
MD5:
29aa3eebafdc0a43452a21e8e82fd581
SHA1: 0c95384f2524a354069533b9c4b00fca70db5dcc SHA256: 9cc8f52599fa2b3e48a40c9ded86ec4559ac881d368440196fc0fd901293d2b4 SSDeep: 1536:WD6DJSgJ4fyQaEJwF96FqxfVz1W7LfeF1y:W2cmoyWW9pFk3feC |
|
|
| C:\\588bce7c90097ed212\1049\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 79.58 KB |
MD5:
cda1f6c62480d4802774133497216efe
SHA1: 080c4033110bb92a0297e2be338f1a9e4b904c21 SHA256: 3ae987722034a1124bce9f3e95d91e49eda45e55f3fa4836762b2e2926d33464 SSDeep: 1536:/5Naw1+rVFJp4ixTcPPrisWIwnS2ECw/z5XfRWTaG1ODK3JdhTa:/5lc/boWFnnECwfR2l1ODwJdxa |
|
|
| C:\\588bce7c90097ed212\1053\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.78 KB |
MD5:
31bee4e4b98db19c6e741e9017652e4d
SHA1: 5b8830213e9044dce8c83d54ef74f17dbe8db06e SHA256: 1cafb060d837779b92f5cb68e7b3718bbd192d0a698e8cd1c3a562c4f33c5756 SSDeep: 96:+DW9yIsbD6T97/potWEKaecMQEwPijUnfZWcC/i6uun54s8:IW9yI9TxQWEh9EwPiwnRrgi6z54 |
|
|
| C:\\588bce7c90097ed212\1053\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 75.88 KB |
MD5:
931af35303905acfd74b2741e736fb2b
SHA1: 54befb33b7f292bb777dfa453a8e637d6c8d61e3 SHA256: e822da865b82e7cdf9307ba9da85a28593359c14b5d8647c5c04215ec78e6997 SSDeep: 1536:/eRus96iVxx02n7CiTUKNUZXw/UVNBajqahImabvjPMHBbl2UwwT:/ecsPx02nmiTUKNq7B5aOwhx2U7T |
|
|
| C:\\588bce7c90097ed212\1055\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.78 KB |
MD5:
18962ec38b13167d6e68103cd5a9ca4b
SHA1: 9583742d07e3bc599492234d02d7197bacdd24fe SHA256: f1e0ff953f2b06f6e214c625f0c47d26be11e67f5871b83d3a2f01c1ac48e224 SSDeep: 96:T0l95cGQcn4KhFFSFXVg2TYh9aPB6X6Pm865HFh6RmQld:Te9R/RXFStPi4qscj6RmCd |
|
|
| C:\\588bce7c90097ed212\1055\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 75.03 KB |
MD5:
a9b1a8b581f156435e400a514f30ab35
SHA1: acded0741eeacb5143779378e1ca608c5f68d5ed SHA256: fda63b2d87acf9160d813a3a8173c0feb91b307ba9e1acdd4deaf7e5f7991601 SSDeep: 1536:/PoJfPQxkZheQ5uoNc5dKETi20mF/UuhvO38pbsXuynWKB9KJxV:/PoJQOhR+Ziq2sG3IsXuynWKHKp |
|
|
| C:\\588bce7c90097ed212\2052\[sysfrog@protonmail.com]eula.rtf.sysfrog | 5.70 KB |
MD5:
0bd4f8e2da3a08b735e5be19ab5c4b4c
SHA1: 6e3643e540cb58ce2501236e8979785730872633 SHA256: 800e3661fff22d2690139b53b708cb5f20f0eced3b8299bc097193b673a99691 SSDeep: 96:qccF0hWfejPYIsoxlDFje0imecDRqY9b5BtbU6V/h/mnf2kx4:7VMejAIsoNJeccebtV1mn+k6 |
|
|
| C:\\588bce7c90097ed212\2052\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 59.27 KB |
MD5:
14dc8e17247144a82296906a1d5855ab
SHA1: 02809bb3bea5e664e1751a3e8a7bb7278414c12b SHA256: b9b638e7e5e561954fafbbca615ffba190a0d6496f8c63d69640308b7d8093c9 SSDeep: 1536:/mrYxApERQBP6AZxMkIRN/Zd3RcXll5aSrJW6CyP/J1bGhuwr6j:/mrYpRQBVxZIN/TIllrLsFr6j |
|
|
| C:\\588bce7c90097ed212\2070\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.92 KB |
MD5:
3207224f17b9f2d73751355876adfdb7
SHA1: 6b3e593e9ca51273b4470bca4f8b92d728c97733 SHA256: 8d8cec1cae782deab413bac2ea615650f941c5148a60b4d884bc18621e163897 SSDeep: 96:tDE8xW00QJdKB41dw56qgAFqh4w24+HEp5t+tcEAGiSrEXj5AEHPj9bK5XHZGj:RE88pQfpfhT+HE52FEX+ELhK5X5M |
|
|
| C:\\588bce7c90097ed212\2070\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 78.38 KB |
MD5:
c13e2e07c7b39b63a8fd5961a3c95fd9
SHA1: 187feb85278e59aec4bd3a0a99b74d2af3c46a5f SHA256: 9e3ad169c19d151a378668cd25afe92ce56ecbb1d4a4752be4cfb30bb1414868 SSDeep: 1536:/B0NDPHXBb3AkPcJqV0eWaGtvF8/gW3u30w+BdILBuxdlpuPp2I4/QdQuRYJXwzX:/B0hvF/UJUUtvF89DB+UdKPr0QdQbXCX |
|
|
| C:\\588bce7c90097ed212\1028\[sysfrog@protonmail.com]eula.rtf.sysfrog | 6.17 KB |
MD5:
d8008ed5085e5e3c218dfab439c3cc34
SHA1: cc8ae489f1362ee135077af63bc0be3ed6658b24 SHA256: cc57e987c208205fb43a5a80bb031f8f22a4bfd02834e0dad66f1dedc348166a SSDeep: 96:m3ygyYrVfTWkQO7X5QN6w4DPhO7+6mlv+o+JA8mxvq/iDZLxdFTCYr1pVcTlSV:mCSpfTWU7X5QN6NDJkhmVmAGETNpV64 |
|
|
| C:\\588bce7c90097ed212\1028\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 59.41 KB |
MD5:
95c7561511cb65b528f3f8ee07a84e25
SHA1: 3061dfede09bf17c974a66aac3ee3f1855ce11ee SHA256: 70e90341bbba0d76b9aaed4a2274faa2ab97718b73514e868073e2f1e7e75cd2 SSDeep: 1536:/XxsNjQRDc4Vp7p/jz0DLM/zDg3OtZCXwus24EKz:/XxSgV7RYP6zs3OtZCXCEKz |
|
|
| C:\\588bce7c90097ed212\3082\[sysfrog@protonmail.com]eula.rtf.sysfrog | 3.00 KB |
MD5:
db74b8b16c5463e6811edf360ea631a5
SHA1: 2f00976d11ff23308850f4cd83b7d8e1b230c6bb SHA256: 12ab8a75b4bda313e910716e1c28a8d01f341709657b86be0ad40a4d5eb460ee SSDeep: 48:WE5rngexV4QGwE/tnuDOq5bNmX90S3u7CSBQp/u/BKllvtW/oU6rBSfR1XrXRYCf:NrngexVOq5bNLz7CSOuJulvtW/6rqRfr |
|
|
| C:\\588bce7c90097ed212\3082\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | 78.12 KB |
MD5:
00e52988423497d9b77160fcc30e508f
SHA1: 7d2626405020769b2d76c8525ac7e1cb9c411ce9 SHA256: 685d625a682fbc40b82291316a71ab33f3dd6667182339e26cb743b78a19de67 SSDeep: 1536:/zzZSrJJiErnPKGTOJlqGlTCj014aVq2QEapqbvj6Q:/zANJDmSGlgNaPQEapqbvjH |
|
|
| C:\\588bce7c90097ed212\Client\[sysfrog@protonmail.com]Parameterinfo.xml.sysfrog | 197.08 KB |
MD5:
3b6ada72cccf131b5ca0260f83daa833
SHA1: 2c7356754e2c6caa9b832c701f25a830b507bc2c SHA256: 1dc5d84df04f4bbfa6fe2cb9b5eec22204259ab9ceb5e95b29dbf218fe6f1b1a SSDeep: 6144:/W8U6Sv//wdTI9Z7YMpF8uNhYR8AvuGejS4:/+6SvwqvYMDMN2Zm4 |
|
|
| C:\\588bce7c90097ed212\Client\[sysfrog@protonmail.com]UiInfo.xml.sysfrog | 38.14 KB |
MD5:
f8f30f97b845bd26c3d5404f235ae52f
SHA1: 9b748de9a63f1ccc43e1b77331976a39e7cadce9 SHA256: 92fd07d5858da9d4e48c0c9dfa03b5d48a7f7c7ec855cc100046f39247d2b416 SSDeep: 768:kXZndAV/yo8m7Q4+TWACqi6OnjQEgBYyZvndUM3Sk4uthjogEvWl+pnPrL2uGCZ:wsX+y3qtOkVnHN4utpIv5VW7c |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]DHtmlHeader.html.sysfrog | 15.75 KB |
MD5:
d294553c4ccf9b53215c2149ec7c6cec
SHA1: 20d36cb0c955e18a10d5fa790553341c8106aa6b SHA256: 9481b97cb5dbb4a850b48e0559c4c3cc4781b5d22603ca837ff70904bc585898 SSDeep: 384:SnH7eQD36wXk8K4HP9y19L6YiTHTBn8UnbRxfnRiyHbMOm4:yHBDN0b4v9S9L6Y+nzndxfvIOm4 |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]DisplayIcon.ico.sysfrog | 86.47 KB |
MD5:
e88da8fb6af23bbe01bfafd792ecd357
SHA1: eb1fe6517b915966dee2ca55676f8d17bd0e7c23 SHA256: 5d70db947e399f3e7120acef2b0088ff5a8dd49c99826778cb7dc30f9ef3ed69 SSDeep: 1536:WRUTt8BzxN4/0yuqC9YXn0Dvt30UYGLXpbhPDxFjXhUGKyWAqFEmTrDomuV3Ky:Dkzxc0wn0RlY4XFdXhUGvqFLTrDomYKy |
|
|
| C:\\588bce7c90097ed212\Extended\[sysfrog@protonmail.com]Parameterinfo.xml.sysfrog | 91.14 KB |
MD5:
e4eb45662dbf2fc73a8dfa5d9beb45a5
SHA1: 306ea5a2e892348195362bd18f0e364569c30194 SHA256: 63105e9465e34a020dde746eeb86d7a3de34ec82c1e53e0905c85446c1db2fea SSDeep: 1536:/BpEIKv+WFlmatbPaG1Jy/wxSZWUFGjU5AMXJY7x6Xp7gvhjWMIGpRgmWbBG73N7:/IIS+mlm4PaGCIxSQUFGA5AMXG7aUtp5 |
|
|
| C:\\588bce7c90097ed212\Extended\[sysfrog@protonmail.com]UiInfo.xml.sysfrog | 38.14 KB |
MD5:
939b6856622e57e71a8e783da56b302a
SHA1: 1cea90c7b82e561bd98cad94587d52f4f65221a0 SHA256: 24f9c1f076a6048c74de31f395f9d3d5e39da2dcaf0bbd142ea90176501e5e51 SSDeep: 768:kXZnMQAKV9Vd/0Y6aJ7oUoaol9YbTd7YXu9AL/qhGf8NSBgeZ2ZL3C/wNvOd:wygbdMpaLoaolKJ7suwq8f8EBsZLS/uU |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Print.ico.sysfrog | 1.12 KB |
MD5:
5426969379db21ff1edce9c01648cd78
SHA1: fdcb7f75d1ea0e7a029dcbe7bb688774ad6036e5 SHA256: e1433bf88c1d7ff05b7d2cb7206a823a25c874ab7fbae7dd67571dca81048178 SSDeep: 24:PgXF5d+6VOaB7WPusxST7Y6uSF6HSUJc78qSTScbg4:PU+6Vn77TcJHH2Y9L04 |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate1.ico.sysfrog | 896 bytes |
MD5:
1e781d43bffe68fb3f5879a19b598e90
SHA1: 3e3c36feca3ff211bc2936ac871a3d3829394e01 SHA256: fbf5464b9728599f13f842d737ffc13ca714c8b1a687eb99976ce79b10c4af85 SSDeep: 12:DjjsxwlTwoTkrLmW74inIeRaoKhRFGH8y1FUDzIu+HjlgVwL+jl0JmGDB8uq2mp:/oxTckIiIOwrB0FEz8/L+Z7GDqt |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate2.ico.sysfrog | 896 bytes |
MD5:
95e658bbeb98731497691f14cfde81df
SHA1: e7943c0ed330bfb70175e31036bfb5f332c8a3bc SHA256: a17a9730319d8a933cad769aaec50f5a4adaab439275f8a565b91b5d3c06195b SSDeep: 24:/oxATnP3DgywYgOyjuZ5LkmLgkiUPMJIyDNOVk6w0WGgcn:/ounPLy85LkOimMJ9NOqN0DgW |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate3.ico.sysfrog | 896 bytes |
MD5:
f280fee7a95b09c8766e6bb01705c45a
SHA1: c5d612beb3497bda0e2704e380eab34dd520b1f7 SHA256: c9bc26f21e928330b1a6426a41c89487fc70c56e06ce764711c96a0fb2ebb3e3 SSDeep: 12:Djjsxwzr3PvNiz1Kh5uf/OQM6y6F+ypT7VJd6gYNSUeFNFPKKtK:/oxKPok5GBM6JbVJdBYeuh |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate4.ico.sysfrog | 896 bytes |
MD5:
0ff2765a92e473900cfbb1a816edc17a
SHA1: 30408be7d267e45058c6743cfc9f044c795babf0 SHA256: 13059669251771e2c662485f63dfbe19aff42e83bfa87d4426b1da8a74d2bd54 SSDeep: 12:DjjsxwI30VnJx7yMZ9PBKy04PwEEIaLqHnmxXA6ypJpkDsv586Z9q4I+1xerRrei:/oxneGy0OlmA6ypHkC8oqJKYtremb |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate5.ico.sysfrog | 896 bytes |
MD5:
59b8053a1a5bb6ceff2183e8302f9513
SHA1: 36cf3a1048958b40b7eac13a8579eee5342afa69 SHA256: e291b3ceffd79c5ca47646c309810f63994d8c264b742f66558098cd00951f90 SSDeep: 12:DjjsxwEGh/rmqkdorVaf+341afuciW+dZLNYxw8TfCXfriSVm1QS3mWysu:/oxdGljkdoZaf1aRKZxYHCXLIh4 |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate6.ico.sysfrog | 896 bytes |
MD5:
2eaad70ce001fe639d7acec33ece068e
SHA1: cf76178f36365b779b924ceb3822d16e5ab79377 SHA256: a2ea48c0ace079572b2217be350e069dc51e18c271a12022b6e12fe3a267f191 SSDeep: 12:DjjsxwQ2Uk2HrI2A8wJSJd2im+Cbfu6CoNExkOzx8WH8r3j3kdw7uTTIrdzSrBcS:/oxnWoNTVifuQEk+8se3wdwqgrV7VKf |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate7.ico.sysfrog | 896 bytes |
MD5:
f6eab9cda032e6626d2e489389e3482e
SHA1: 19f5f73a0f793ca145f1e46e1e1c9fbd1a2bb10e SHA256: a8ebc0087c07d42d9d50350a253fe87b040e4de4f1815248fb74c4d434969d45 SSDeep: 24:/oxpkgoYB0dPVOjaQW2MCdQBmA1xiCiIT:/okPGaL2MCtA1YCiIT |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate8.ico.sysfrog | 896 bytes |
MD5:
ed60c5ee4cff66df2236f6152647b4d8
SHA1: f632440d376593f5b64e610fdd60e112836db094 SHA256: f63b14bfe6f1306f883519ed1a3bf0a29fd3dbf0dfbe5d0f5aaca1148c73c642 SSDeep: 12:DjjsxwlVHDhCreHCq4X+PvkNP9uUxDH2dvGByG+YrhFamIbgaj0dkwB7J9vDvOOY:/oxaW04XxNEQSdyyG+YrhutKhLix |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Save.ico.sysfrog | 1.12 KB |
MD5:
e5773c9d97a75565fb3861218662e4f7
SHA1: ddd216bd7826c937bd9d1f4b13576a7e3cbca749 SHA256: 8490e95dae92e4a070039770666781cf011b5eb7ad4cb360661775700d648dbb SSDeep: 24:PgXF5o63KmYmRb59501Zxr+NXi6YxwTW7v6s+AVMp5oJal8vfezes8Y3:PL63KmYWMHcg1VVHJrnezgA |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Setup.ico.sysfrog | 35.86 KB |
MD5:
210927ef4291d9e5cfe9f855fb1dac9a
SHA1: 8323d5f352fe6a8cf7e2bf531151b322616c84f5 SHA256: 5c574438a017e82a6fa9b8e841e37d502a55058ce4c575fed66c25809ecaaa76 SSDeep: 768:i7/L0vC1TA9HBaOH+PVSn3Mswr4yJUK/l9WCtSzM7q0JATHQ/EPNF:izwvC1uHgW8swEyJ19ptJqGcwcPr |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]stop.ico.sysfrog | 9.91 KB |
MD5:
e22f51ab1d3467d0c5473feee724d3a5
SHA1: 39bb5dd81a1be61482b7f9497a1c1f9bc465cf0b SHA256: 3220e9de8ad964dfc0d10c8961fa5f8efca7cd898de93a23a8a2768021489d88 SSDeep: 192:R/ceZiURbS2nNmcJcmuCldvvqE/f7NDJcBsoaHCJLotXNgFU:R/ceUAbSqmcJcadXqE/RSRaiEXNWU |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]SysReqMet.ico.sysfrog | 1.12 KB |
MD5:
8c761fb05889c29d7cf1f0727e0154a3
SHA1: 90d2282f5220e89d864721a425974fa2794c6d7d SHA256: db4aa9efd878c1c6621cc4e30ce4c05ca66b7e3bfeb752758e2db244405459fa SSDeep: 24:PgXJJ6eL2eUbpHBPtxJjzeifqxNMBLn60iwF+UVdmD3mG8dsw2e:PihsHBlxxzVfqxNMd6IFgDR8dp |
|
|
| C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]SysReqNotMet.ico.sysfrog | 1.12 KB |
MD5:
cb505f112df6cd0ff9ecc18fd32fccca
SHA1: c740b2f34717a4e4149305ab22eb9e1f859f1d6b SHA256: a63c6818bd75758b30278d8e54821c92c242f20c5047864a5942a113f6b48974 SSDeep: 24:PgXEXITNy+iFTQyGeV9CMSoeR0R6D6rin97J92H/f4goEq0a3adklAwx5m:Piy+cTQoNs0PEYH/gZEHaayXx5m |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]header.bmp.sysfrog | 3.55 KB |
MD5:
d38812e0b21e3c1e5e014f7381691dfb
SHA1: 717ce58ebb51cdfbf48f0e84b7602888fae1af4e SHA256: 18bd817b38d412d29fd1834d89d30b8d1a00b5d052285d5beb2cf28712acefde SSDeep: 96:0tPr2jIKwnvqzM0RGVYj/mSZWcArbtA/bjukzPEM0vJzt:7cKwnvq5RGVuBZo2bju0M |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Core.mzz.sysfrog | 173.08 MB |
MD5:
480ccc2b4ad5e168ff84ae96f98383ff
SHA1: 78ce3c578fca7f4bbce6feecdb5df4d2fdea2bec SHA256: cff64754a744f631152b0f7a6c56353cf0acb95a79e09fab2d79be815d831347 SSDeep: 196608:/aBG7oCFXtTkpkMD/47+GjOuXHzp3aJd6vH4FuTmVCoBPdTCpJWhlclE1:8pkM7jIOqzpKzPFKwCoBdWpDE1 |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Core_x64.msi.sysfrog | 1.81 MB |
MD5:
1ade911af0bf677735dd2c69cd899e34
SHA1: e896fc5a6fd580af215b16be5348229fd10a32e0 SHA256: f14a12e345fc0946f412829009f2f2479626ce3a4b6e1222b5b9fc708ab36622 SSDeep: 49152:NMRNBPYFI797WGtOFtjhU9n7RY3EIrXDgC0qO:NMRNBQ471etjhU976Jrin |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Core_x86.msi.sysfrog | 1.11 MB |
MD5:
07c3646828fc1acf0d4cf39633821e6c
SHA1: b1f44761466fc9c2c9a7a8b5e0564a5d99ba2c1b SHA256: 0959e66b239c80c06991843e653787026ae147a97b94ed5442e1075577c8271a SSDeep: 24576:fS/T6pdolf1uDz75RAXYfUWYz+ugjD/3TEi5wq6WqEMkt18Prh:fS/Ok91+zFRAXNtdgjD/TZ76F/P |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Extended.mzz.sysfrog | 41.13 MB |
MD5:
b8666a63a8c2447496d85404aad0c717
SHA1: ce3891215b7a85be7b7e3a0cabd6fb09a4f32a92 SHA256: 290bd007dcaf1d94db5687dd41fb2f58b90f8443c0f3011b91defc34425bb35a SSDeep: 196608:DuN9j/bH80GgQw17qFd0V2Px0ucX3XOuEeNJPNsjuoJ19axmIE7RnUzYYMvnn:DuNvQlFdX05n8e8J19CmIEtUz5Y |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Extended_x64.msi.sysfrog | 852.02 KB |
MD5:
325628e9964f24d1e61fb3130a785a94
SHA1: 3499e6e4c669fad0aa808c9da0ac8e054ec4aded SHA256: 66b68cde8b951a46797f54805c1523f283e5d230fb6e41c65b201ad330396de3 SSDeep: 24576:LXwA8O42wi8rh97fNr+r+M1Exdd0OxIiW:LAbOOjhQrmzuOxQ |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Extended_x86.msi.sysfrog | 484.02 KB |
MD5:
91e8dbcde0e73f04fe6677f78ee57e53
SHA1: 464af34bcb3a082c6d532b0c98baac04cb0c2441 SHA256: 495df2738af766bbed7b73f49889f77db0d1387b684e57407147005b03e4241a SSDeep: 12288:sOL5G7OPTaxFA+8mGaodVFLh2ACi2ANWAKJeuTYSKQ9N:dL5G7XZ8mGRFLhTkAhnc |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]ParameterInfo.xml.sysfrog | 265.67 KB |
MD5:
a41ac9a229406cb386f7b04d54fa548b
SHA1: 52644793901fedf037aab126510adc06c16d63eb SHA256: f69b0ff57afad5b35964a846e39bf0e01891adf7a7f08bd9f9f1c9cd1266fd9f SSDeep: 6144://HLcWp1Iye0LET2eQuJFupedgKz9S0szra27jyiCnY2TE0dXwf://gW4yeksFDdHz9T27UnNEA8 |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]RGB9RAST_x64.msi.sysfrog | 180.52 KB |
MD5:
48a5d9a3deb2ae72dad56fe3a1eb90bd
SHA1: 528ddf3d80843c233c35e81e5724cf7eef0af5a4 SHA256: 8ee4bfb0f7cb317249b6f481cf55b9185f0f2cb59de1a42f2e9703e648041d2d SSDeep: 3072:8V3dT4iuPrfEypwv6SNc6uD+4qkkjV2KGByI/JTIOVLYHS1gei:ktT4iunpwyTDbqkkYKCIcQARi |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]RGB9Rast_x86.msi.sysfrog | 92.52 KB |
MD5:
e796a75b10740479ab977c51ee28a93f
SHA1: d9994a1112c8634d2c92f44fe172efc693202d9a SHA256: 2b6d6ce87f7573c087313cb95acc6d27d51f0ef35a46624e86e005ccf99c3d38 SSDeep: 1536:kYEfacpEkroQri4Cu+dzJiHd17XqFNwptHbTz2dXZCwabG8VAhIx:kYmJpvr7Cuy4aFN+t7O9abkc |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]SetupUi.xsd.sysfrog | 29.42 KB |
MD5:
ede7b7d5bf1624f691c77b5c7a0040ed
SHA1: 61559b212c4e58e32e64696cd3cbade4a535ee29 SHA256: 2fd969635781fb4712f4a5c0d339f54c70f373371fc3cc5bb29c31a05de01a37 SSDeep: 768:1aDkgE6w7UoCohTbQbRIwYtyFSIkerjiVu4OQNn:1F7UoCoJaR1hk6jiVHOW |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]SplashScreen.bmp.sysfrog | 40.12 KB |
MD5:
f6ad9db6d7ccf7861cf2a806860b39c9
SHA1: 7fb09609bbe3c47b071361d13d2c74747fc4a97f SHA256: 0fb23c27fbfd7bf16c039ca171e0f679c381bf727cef07a341fa244ca072aae4 SSDeep: 768:HXcXM5mH+/wCpq+zjH2y0mnh2/VnmjG4Q0HqFmbgq+9heW+BxyQHtlx:3kEmHNh+nT1A9wBQ0qF8gqyeW+BQQHjx |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Strings.xml.sysfrog | 13.77 KB |
MD5:
3e93587279c4271d73942fc0b85d774b
SHA1: f495bf786e29925abe07e527d2e9e3766d79be18 SHA256: 7e9f55b7abd94d2d1a8efc9f4b4bec413dc5889503f652593fbd4eb66a4bdaf7 SSDeep: 384:krTxXF6AHQDY6ybKjQbnkRXrSJ9eb1pmcg1JhmWFn:khV1jbbNkRrSnqg1JhV |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]UiInfo.xml.sysfrog | 38.00 KB |
MD5:
10620e2017770c3840bcd2daaf164f1f
SHA1: 31eef07e99beb8825a2b0bb1ef2dec3dc61b62c4 SHA256: ab77e6e6e0c6a01ea20e59c1201d2f309d727ff6ed3876ff49e7ade672189390 SSDeep: 768:kXZn21TDpApCEtI7Fk9VHmD8ZEiaARfPweuQPRiqYFFFjtQ+T0lh:wyfpApjG7ig4agwtQp/qjJ2h |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]watermark.bmp.sysfrog | 101.64 KB |
MD5:
bfec00d5d611d5ae297a2a1359e5e4fb
SHA1: 95af887d0b1e1f21e2f2d9f6dc2d04e5d218bd8f SHA256: cf44c53bd4e2021e12c3ee1e473f051e33bf40dbe4914df00ad676f51cc5893f SSDeep: 1536:gPfxFcGunNppSIQPVVer6Ug/HiqIVS5wOh/zvj/iKN2VjjFBULFe4RoyTTtD+POZ:mQnRSFVRUg/7phX/dMj4Be4R1JLBvj |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.0-KB956250-v6001-x64.msu.sysfrog | 4.96 MB |
MD5:
3903717f51f19195a88a8e25aec293bf
SHA1: 7aa483b20639c39db8438775af996b9d4e180cfe SHA256: df29bfb4fed625a8c348b3753c8e8fddf359b9a5d568ca9769136b7d3a8e9806 SSDeep: 98304:D7Io604T9zXG3kVf/N7OtygPQkv5u1JbRKS02UV6:/4TwkVfFStfw1JXIV6 |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.0-KB956250-v6001-x86.msu.sysfrog | 2.09 MB |
MD5:
7b1f753c450e988e4b79d765cc40f2ac
SHA1: 444e77d2e5b2b842cf8ddafd3d5d756e0329d821 SHA256: 2b5849e4f24d28948fac9ef69e25b6a130d21083df337a41942c2c747ed59e5a SSDeep: 49152:CKei/Pp//xrlZ2LNJk0UnRJaWQ52DlKYtVGT:3B/PPrlZ256V1DlKmIT |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.1-KB958488-v6001-x64.msu.sysfrog | 4.86 MB |
MD5:
09d8fa7cc9a5cffaace6b588d26c189e
SHA1: 2bc4ded28f853f2f042cc062cfce9f806afafe28 SHA256: 1a2dc19fe78dedd92af700479f1bd7cb8ca0ddece9f14f1b8f75cd769402eccc SSDeep: 98304:JFTy5MTrkdt+YpXL/vHz9fGwmDdJgltPQOwEiIlsYWd:DW5Io/1rHz5GwcdiHPjwEi/R |
|
|
| C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.1-KB958488-v6001-x86.msu.sysfrog | 2.04 MB |
MD5:
7cf0493229efa01d6a9c77a80dd7dbc3
SHA1: 75c93152044f628d4fc74a32b5d98764d7d8fcf2 SHA256: 37aed3b7080354cfebd1f3cdec4d61ab9ca581423f6abe08ccbb737a8d07df6b SSDeep: 24576:Oi7AcW/9nC0ZgGsy+d6dyq2Cntl+oI3kro+Z153uukOtDosuHNxw2KTOV7xfVhDE:gCDldM2mgLUhlDi5DV7xNRJjT/R4Np/n |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Client-Licensing-Platform%4Admin.evtx.sysfrog | 68.02 KB |
MD5:
2edfa11fe92963eb622fcac0bf8f70ac
SHA1: 2cca2423d1a8768c4ce83bd53b24da9966b68706 SHA256: 929829573e0cc8541e9a4fa9f8e7fdbe859c205f2bb3723127434216316fc06f SSDeep: 1536:ijUEs0uL5ylQqd0kASV8XCOPhxeDyRa5GF/OmbLj6kxW:cUEXutylp0DCOPhxe2ZOmuiW |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.sysfrog | 1.00 MB |
MD5:
af4d9e16b1388a53c2c48397922e770d
SHA1: 4fab8a1a99f051c6c13efbb196beda07a1724172 SHA256: 659e44fa2b6048f71c473a56bd640c17fb33ff51a91ddac385f2d0934773e702 SSDeep: 24576:H/gV8NDQD4n9aZE8zhTbmJAkDWaiEwyTbed4/OPTL3PZ+ZjADiO:faPDqihTbmukDWebed4/OnfZ+WDiO |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppLocker%4MSI and Script.evtx.sysfrog | 68.02 KB |
MD5:
3f7d9c0d060f268cc3f72341842f2a1c
SHA1: a31f3bf617e2349074f5c3d8dd7bce462e273760 SHA256: d3086861ebfa944b860ecfa1776c740e2c053d6a2f6af36b93cbbddddd90cf04 SSDeep: 1536:keShEQ7UPzf9aGJ4Qt4hvOpxOmlKI70UR0dMe2Yr:ke6v7UPzVv4E2vZmlKI70U7e2Yr |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppModel-Runtime%4Admin.evtx.sysfrog | 68.02 KB |
MD5:
4d21b255b3022ee8224e176c166b3058
SHA1: 5b12830e72d14385f66444030e9392563211603f SHA256: 8fe63995b9a145338e12cc829f2c9d880ad39c1c534b62046bbcb60aaa42b593 SSDeep: 1536:oaIQsx8ZRCvdTaL/NqAqbV9W2wUxRgbzAGPUybF4zK:LIQsyYdTaL/NqAqx7FxRgb3PUygK |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppReadiness%4Admin.evtx.sysfrog | 68.02 KB |
MD5:
f4f059c29195fe68e0ab608152bd1127
SHA1: d93130a518a5b583982ec4348dec7e633bd9a709 SHA256: 4f4c9daa4ec9b9f8128063e06efc7ee223c3d5752ccf4a0e8fd9938212feb489 SSDeep: 1536:NnbWP4foz0yl2arvmHpwUTVWP4MAJSXd1XdXq:NnbWEOMar+HqUTUVrdXq |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppXDeployment%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
857b9099be0d2d2506a4cf841131bca6
SHA1: c9bbb95b32d172057baff00b97f9d3bb565cfd80 SHA256: b8bc96492870cabe83e4d9c41060a8096138923c124d444f9420c7b97ee3ffb4 SSDeep: 1536:kQQ5CvUmjabxCO2l1gkjNtFfyNxrQ8D/w:kQUREa761gYyNN/w |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.sysfrog | 2.07 MB |
MD5:
8cc5a4ecee219cba52edd18403f5547d
SHA1: fa29d84ad0ff63b2538799e83a070cd745a0ea16 SHA256: c397d9a921853812420ec4632d16908b96de65eb7849834872a0e264747314d4 SSDeep: 49152:/oHa7UjM68JkvhAPOC771pZTMo0AElvRk5MIzSPp:/oHaM8Jkvhw10o0fdm9+h |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppxPackaging%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
1b2a7603d71815965a8cce86e20728eb
SHA1: 7cb58ff96f3bec4273ffff79ca9481030ab62f81 SHA256: 0929df4dbdc0bd1a796e5444e1287615ac79af617903d408802fe5748a11a10c SSDeep: 1536:az1ZvoCURR6q2VqtdQwB8UDGXSbny5E3f/BiFctJCOi8P29rRu:qPoHuYdBh7nJv/BiFMa8e94 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
ae5306f49e6fa9617ec7887e337ce020
SHA1: 4cf7225136da85314bb06c5bbb5a5c4f797b110c SHA256: e487230a2788bc6cc108f4d36057d3ded7f4870a53eb895f971fe6205c7c2ead SSDeep: 1536:/uCFfRVoWoBZ62jb25nBYY/C5z6K6ju4wQAMgXdv/HK7l5:/uC1YHlEnBYCAV6VwQAMgFKD |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Bits-Client%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
b2c6e19b9461ad54e96aabc4a3e5b4f4
SHA1: d6b9236c6231c03a852bbb82dc9a9e0a7b00622f SHA256: 2ff5cc26a73fa9cb8d1760ea4a04d34ce65d7bb092dbb906cb1e5878e9d27744 SSDeep: 1536:zchY9343W686InQAhJ53i2FDIbEKjSn/4TO5KjfNZCFlxFhzSqx7:fJ43WX6IQkJA2FDIIFAYKT/8xF8qV |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
e4fb0ca2c6be58d57a629c534a8d2451
SHA1: 03ff29ef27d5f08e293fd42258709861bb1f2c97 SHA256: c9e814c710d1c2da61f31c9af4a7ffcb7543190ebad4208bed92171581a49702 SSDeep: 1536:zPH5jPI5MHsD7E4heYy6OM7HCbP5/cHiw2YC0ORcAhzCJB6UK3Rq5I:7Hi+HsD7Ew7HM/jFD9uBViQI |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.sysfrog | 1.00 MB |
MD5:
a2813b234c82755694e068fc6a982236
SHA1: a675976a1d154a49fa00a7c03d842c5f7484fcde SHA256: 40a4b17ea8bf839d060cccaf4012117a09abe4ff0c3960c9191ca02829e0e9aa SSDeep: 24576:VbC3SqOw0S0ZM9BXtPj2Sdjgr4MXo6AFIIK9xyG:oiq7/djArdY6AFI78G |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-DeviceSetupManager%4Admin.evtx.sysfrog | 68.02 KB |
MD5:
4cb55e6028012ef69cb80e8e6c495ed9
SHA1: 2be2961e98872b4c72defb7eaea6a226b8695396 SHA256: 43a37c616385abc4b038ac4439f0f52c9e5902272c82107e70c9d12465f7b059 SSDeep: 1536:h5GNZ+G6Z1vHzuMGOgXfxU0ECN4uFoibyyJjknlVZ:z+Z+GYC/OKtEqiUysknlVZ |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-DeviceSetupManager%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
b5e9d5923ae23c0cdeceae2148bc2ef1
SHA1: 52c8c543358bae08a67b94e3898b87f36feb95ee SHA256: 494ff40067da3affaa575bd81fd48a0ca65e48e212bdb9e6fd1394d1dc2c3f1e SSDeep: 1536:NwJOOS0cMMLBEHWLkE9hOC3jO9ofWlMYrw62DJw7NWVJB:NwQOQpN9OCz1ufJ43B |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
4fc0dedb42d38ca66076a033740ce9ec
SHA1: 574e436250184f664c5ef1034c9368295cc0e3c2 SHA256: 787c0a58fd8a5df3c34f7698b9384d905532e78c78b236b2f12cf4ce5fe4456d SSDeep: 1536:XT0+4ZCquwi7HfBJ66CutgalNq27bFBmxr9G6Ye4pynHUoYBYf:j0Y7wGZvtgIq27bFuXY3pynHUoMYf |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
55ace6c0887a5a7d9a7948d864f431fb
SHA1: 79ac45bb95374293ffde3449c28ce0b858299db5 SHA256: 89d0af513fb9462bcf5e6bb50a815d12e464b4e6b09f0901c820d2c3fd105973 SSDeep: 1536:a8SfOA0PKeD4Lz0mFALeV5DwhuYY9eXaqveo+t+X:aEPnDtmFALKmfaqveo+t+X |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.sysfrog | 68.02 KB |
MD5:
f7df92a00a50dcedc7cf7546d8dba206
SHA1: 5870aa4b81e4831289ae54f4dc216c7cc3b98c86 SHA256: d3cebf44b16127236fda51d425e79d5f3a9bad08b8474e845b41927747709603 SSDeep: 1536:/uCFfX8Ep+4e2dL3d28Ko6/kMzGIEX107GQpPwUYCgkx8Nbmt:/uC1NfJd/Ko6tz6O7GVIRx8i |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.sysfrog | 68.02 KB |
MD5:
a52cf7d095db98112316bce127429177
SHA1: 3abbd4ece74516a28bdd74d0db86e4f4678b2510 SHA256: 88d0f6937fef83b6578ff89d70a8aa9d9f6acbfb776616888051c8596336edbd SSDeep: 1536:a8SfDrr09wo3F1Q1ORHSPg/UQeFqfP8NgVCcYTaoCTcsNU:a1r0i+F1QoRHSIBfmkCcas/NU |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-PnP%4Configuration.evtx.sysfrog | 1.00 MB |
MD5:
5ecc5045a52cb0a71f82f79df7d135d3
SHA1: 0c6f98a3b5579a87f7f970ee758563eab5e9f312 SHA256: e0cc6b1baf0370f467b2e47ac5a79ecf04e229a908146dc4b56aa2581acfdba9 SSDeep: 24576:Lcini1JkVW5tSSY5Ol7mdnHfNPVSWb+8Hm:L3ni1JkVW5ZY5vHfNj68Hm |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
dab8ff15f7fac695be7d4106579c7290
SHA1: 2b674d8aab877b6af98e489b4c3513ca776ba174 SHA256: 50456b751a49ae1f32abba5a8b982ef400ce302b5babf3f43866d005349083fb SSDeep: 1536:a8SfmE02d6TS+IMyphQI6KGIydMw5nMCTv+8RP0NBmj+8j:asEdwdIMypqKGIyKw5nMCThh0Nsjt |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-WHEA%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
ce7fed3cd9eadf3f7c73c5fe62bf65a3
SHA1: a375f1986cca1aa21c7e5565ae97e5efa209b3f4 SHA256: 55f3461c13e43ebef919fc6109c1a33bd275634d159700f702ebbefcd5fb8d57 SSDeep: 1536:/uCFfNdB1M2Sre0YXUJMSlS34nATU9SHbqlkXV3RquUce9zc0sPYAUY2Bj26:/uC1nB1Mxre0PMSlS3NUY1VBHeVswAUr |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Known Folders API Service.evtx.sysfrog | 68.02 KB |
MD5:
97ece2f1490c434d22806f64acd6f7ac
SHA1: c430d04e460db10401f84ab312ffe77fbc37969e SHA256: 7d161e689feb3785f7524a7e21e931edf509a346cf7f5655607af7b1278c7cc9 SSDeep: 1536:X82mSGxTdyALwrz4g2eexbhXSvBtGuOLKDH1vGIK2/nO37S84:5mSijk/4NeexbhXSMKDVxtOrS84 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-LiveId%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
b9cbb2ae615687605a480871361efc5d
SHA1: 5100eafe0f320f6280afb3f27dfffeef871b165c SHA256: d4da535c81f1e930006351f5b79a4919082be15ceb51dd7f1515d77ae4c9ca4f SSDeep: 1536:DMiGmncqVWzm/9oM3031UNaXjtSeBzJz2oPEpyPn9ed:oiGmcqvo132NaXpVBzJzXP74d |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-MUI%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
e7af0f47ca41e843ba114c50b771b076
SHA1: 2ad1f34caf0c8fe8e24ea80235d5a520ee194a2e SHA256: 096bc29dc1ac923ea88d40851fe654fdb2dea581aceaceffa6d4eb2f96c8abc9 SSDeep: 1536:ArHWUC5+ys2SJY3EB4Q2L/zzIsfzSZE0e/EGeIvfi5mSQkqwnKKTv9:AzWUCy2SJnyQ0/z8iSZPGeIvCmQnV |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Ntfs%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
1c6132fc678bf9a503dd4a67d63f88b8
SHA1: bb126e630ad2bac4d1c49ebc1113affc9affe8b8 SHA256: 281c24fa0840c989aacd5c2f3f6c1ddc87fa421fdd511d4c94225416a959994c SSDeep: 1536:/uCFfM5A6HgwubMf9iGssqdKj0VnGBdvjhdaO88HSggvQfo4aK/7:/uC1MSdwlMyj04BZ3aF8MQfonKT |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Ntfs%4WHC.evtx.sysfrog | 68.02 KB |
MD5:
b5291b5c6e4f325a6f49f1c36c30d374
SHA1: b1c4f6e52bfd86cd4c1db1af3db4c1d40f3cb9f7 SHA256: 9314461cff7453f1c021263ad40a47a59255e71ead6f1e043971cc339ca9e3a2 SSDeep: 1536:/uCFfFxN3yPS708wQEJHgGndygUgoYT0xBDL4td6jx/cRaR2BoR4z:/uC1Z3s38+JHgGdKgotxBDk6V0/BoKz |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-ReadyBoost%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
fd1cf43a34502e38339362d35e6b87fb
SHA1: 230660ce58c855598878c7a9a80b0c2e1794b435 SHA256: 963123fed8037c37e7b728df15dcac18727f8ce87f32723e66043b9143cefcb5 SSDeep: 1536:/uCFfmt4mkdOJdu886HlsHdxBaWo93Ut+cb5B2SwH/hLgo8:/uC1mt4TdH886HlsHdxBRt+cb50hS |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
0769969e6fe9ba8ed5c1593459a91e00
SHA1: e28f3215fbaca203b7e3fd53dd4ae57ce05eb399 SHA256: 01bd95f2a9bcca7638c2d98c7af751f812c10fe0c779f81cdf4084154954c169 SSDeep: 1536:zGb5MDbOn1mf8MoXSn3eOWIAX2GtEyevTI6INxXRzUIy0:kEFbsSnI2GW77xINxXRzUl0 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SettingSync%4Debug.evtx.sysfrog | 1.00 MB |
MD5:
156946414087f3e4a2a4f6891d04b1c5
SHA1: 01c8334d079f980118832934dd0ee25d7f488cc8 SHA256: df7246540445029aaf1f85da282f945acb76bd20ce2ed571d692673bb073f566 SSDeep: 24576:Hb6MVYf4sppcUDNyYEnwyxPgMubabWfExCaOxkLH2IosBUThjf16wFjmF8k:Hb4fn7BBydnwMPNdbWskabWbb3CH |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Shell-Core%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
eb6ff51b1200fb1ceab155aeb6882556
SHA1: bc62601fd5290e1c582a1681ec6440d9d4253be7 SHA256: 7df9d7c0ec8f3a47707f24869cb09863aed9047422774dcf284b984aa4a02bda SSDeep: 1536:ghd77/4NVsrbIBSksOeWhbmwhpfgBK28pzTdOvEev8PQCPA9:W7oVsrb+vsOHhLkKtts3UPQC49 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SmbClient%4Connectivity.evtx.sysfrog | 68.02 KB |
MD5:
379c47db246b5422b2984205d60c07fc
SHA1: 9110acff1a160e3bb5001877c6e1e06d9dcff7a0 SHA256: c0a35f2daf63b30b2e034a7286ff81622b4391a0aabc92253f3f67bd1eaa232b SSDeep: 1536:z9xHslIhcnwpDKpUojpGjEeHQhU+IqC9YHkQlR:DMoN7UGzvEhkQ7 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SMBServer%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
43f99cdcde4bc14d177a32df75876295
SHA1: ec5c1a116feeba383c5661198dee3065b91790de SHA256: 506eb51c62984dbb91a710fd1b566c500986bee4f6ab42497ee47a5aeab684e7 SSDeep: 1536:X7NWg+zuz/FZXJAxqnS8aGZDKtJGriKsudhu+WPp:Ugbz/XXiYnS8+fqiK9+p |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Store%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
8dda3266a49f39c66732b64cb9bf7ce8
SHA1: 8726d6c6a4bfc23aeefa21c6ad8d458e6eeb6a2e SHA256: 3ed53dd75ecc04e81b6ea61c76e1b8abce313a457fc6cfb0739ed8779a697bee SSDeep: 1536:a8SfzHcbdFduGo17RI0VweFY/QSpkZguLpS+O/mnXwYnxMdLkRL5j2:atHRT1O0qeZEkFSRmnXvMdLSj2 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TaskScheduler%4Maintenance.evtx.sysfrog | 68.02 KB |
MD5:
40e7138d4918e5f1b11dbf890191b9d4
SHA1: 7a6b63b8759a52a0937d6963de5a4bc24fbe6c71 SHA256: 784d6346378127d5ca96a769e8d9c9aafa2fc7a8d84488feb43378583af4cb0b SSDeep: 1536:Ipd3SiowI//w8dkd25a6raNjo7Klnqdgdlc+BPFoAoaln8ui76:k3e/w8dkmyi747dlJBial8uie |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.sysfrog | 68.02 KB |
MD5:
1e9745b1339a2fa7296e522e525a32d0
SHA1: df1c4b13e1085d6fa05584b5b50701a5d8473c2b SHA256: c26b3d609982d26dee9772f12cc3fbf0fd06a96c9c58edcd9a87b66604474893 SSDeep: 1536:T0zniqrEJ9dtaDHIoPcIZguw9ql6ZDgydjP6Y:4Wwojbuw9X1hdmY |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
9337731ca916098ce57f160a025876c7
SHA1: 4556b9cb2853fa1c3e11dc358eb0eb20ed65c0fd SHA256: 81a62f457ed201c415908f999ca7ebba8798f2c76502837d40cbf7e17fb0c0cb SSDeep: 1536:GGvFbmHkVrL4aisWGOkhbzMtRdgTPZ1Qq17QwzcQbS60a:G40HkVQsJOkhPpQDQbS6J |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
9edb9203295a402d80ef4643dd730c39
SHA1: 5cebf483407f802d7935f9081b7a372de5dda1e6 SHA256: d251a8aaba969ee5cbe8ae43332ce47a1a075ee2885e0d15a1a3a70802a66452 SSDeep: 1536:zR/Xb2lvf3+wSpH+4zizbP9XfvYDbUBP0:d/XW3PSFzGRXfvYDbx |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TWinUI%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
2b1cd133d91650530fdfd61a8cbc549d
SHA1: f38c8ab8be064dafd05f53b80ce6e2d4d522ef65 SHA256: 6cea3ed831baab755a050a4182dae802c160bc4ac506ad82152037972600e013 SSDeep: 1536:/uCFf2VlkKcDdE0sO9K2QPHMGSlndOIaOvDM7Y3PLMd40Q:/uC1gjCGPO9K2isG4naOvx3PC45 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-User Profile Service%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
e69b51d702ad67cd3ba8f289bf52b3e0
SHA1: 9d00f067cb8bc513d243d1f3aecf6379c8e1b310 SHA256: 309412acf300537c2fb557d3d13b00653fdd0c1a73552fd61d1263c87196fcb2 SSDeep: 1536:l798vnMnWdZQOToAwO5LCNzls9Q6vDXGDKBEaaX9Ty6:sv1ZhdJc56vDXGuY |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-UserPnp%4DeviceInstall.evtx.sysfrog | 68.02 KB |
MD5:
5f07f636a7c05c4720f69244f27c99d6
SHA1: c77d201fd958c9422775ef627f6c16b3d069c1db SHA256: efb7e96437c6ab135b9605308889d86f57d857b42084263ba83b3dffd29b413b SSDeep: 1536:/uCFfFpKUAqhcSXP//vlzLtjMf2BfWihlp58Ut+AkTxjt:/uC1FpKUBrfHvlHtjYiOeCRlt |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
e53cddfe2860de2fc2823d915e525a81
SHA1: 4bb1f680c79d866760b01e0a27d719c6bfc47f8e SHA256: 34aef5dca8ab94a0fb11da835f19547095cba005ca604bd61264723c1e69f79b SSDeep: 1536:XbS4STb9qITVh17/mi1lIO4m90ETLeVc5/BsL9BzsOml:fjIT31blWOj6ETLYceXzs7 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Wcmsvc%4Operational.evtx.sysfrog | 68.02 KB |
MD5:
6fc33ddd746fc5db2802a2598f1f8cf8
SHA1: a02cc9c40c246fe7ad2b2c6f5175b230ca641843 SHA256: 5c18531b648bf6f23355dcae4737dbebaaed0fa77cccaa4a0953c575def4e2fd SSDeep: 1536:h4+osaFIBUjk38MJW1Prq32aKhzn7dAodkSp5Ymt78n1:hAoUY38MJWhnx7fkcKGS1 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Windows Defender%4WHC.evtx.sysfrog | 68.02 KB |
MD5:
22d77457c5cfab83384a152669f9485f
SHA1: 31b96769c9e87972b33225c34bc0496659fb965c SHA256: c9a8c40d00782012719c6d4a50cbda516346d8283c09a7d44b9536843f2ab601 SSDeep: 1536:I7grSRscwcVaIKNvdOHxOHkOu3uZ9VT8NVu/r3/UNTkphfgZ8:9rcscwyaOHCu+RQNVYr30kphf28 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.sysfrog | 1.00 MB |
MD5:
1df870b97e5daf2b205a948ad3895e12
SHA1: 9abf3aec5e71ee903e467f12ad7d876d0a79abea SHA256: 0a2aec976364e9b7ef6977b59283f87cc946f5a01b9a2f5ea08c24402f80ab47 SSDeep: 24576:GsApt8nZuVxIC2tn62+ENaLdj+LeJab64FNBhu:GsApK85otfCj/ab64FN6 |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-WMI-Activity%4Operational.evtx.sysfrog | 1.00 MB |
MD5:
f3251445379b31a0ca993fbebf6c1c00
SHA1: bd34fdcf80fe0a3e770d87dcf1a8a27bf3ca812a SHA256: f3c2f5957bd064428f542f376348ff9fac0fd5b9ccc00a6620e200bc3066d6ec SSDeep: 24576:W0TjWcq1oVaqIeN+SelmIgnASApyX4DfbJdVEn:WRcqafhASelmPnASApyX4D1m |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Security.evtx.sysfrog | 1.07 MB |
MD5:
98ae6e90bad33b4ddbd9949efe58479c
SHA1: 360e827e0d8cdb84c2fc41b3e8303046d9d479a7 SHA256: 9798065a4abbd8a8f049ae47ee6ac695e353e9a8da4898c532ef6611c8a24b9c SSDeep: 24576:vcUJs64ntldDDYP3LtWBUpfbBL1xutID+efGb4AqHL/KHc71GKo:D94DNiL8BUdbBL+O9fMU/4cE |
|
|
| C:\\Logs\[sysfrog@protonmail.com]Setup.evtx.sysfrog | 68.02 KB |
MD5:
77152fc541f61fbbd16664bee78d2f63
SHA1: 85b87a640940f932ce1e1fe6cc1b944819c71a89 SHA256: 1f0c07e8a49bfe2aadc2290a64911902714951ecae6400ec1fc5e79d1035f4c3 SSDeep: 1536:Xf38Arqh7J8e9tMPKnltcjvCgc/Gyn1UXCMwU:vr2h7ntMPGtcjaDF1UChU |
|
|
| C:\\Logs\[sysfrog@protonmail.com]System.evtx.sysfrog | 1.07 MB |
MD5:
1c16b8e1b8c345925cd90188c50b6f4a
SHA1: 67335a49346cf7edb1282fa0d2cf7eadb690d00b SHA256: 8fc49d078dd2b84921afa43e8aa0ead0c22c1952f479bad6fbea156dbdd603ee SSDeep: 24576:KAmYotLJ2+Bse7csWyr+/EfImgWLplfor0YY:KA3otLJ2ytBEEgpOlgAYY |
|
|
| C:\\Logs\[sysfrog@protonmail.com]HardwareEvents.evtx.sysfrog | 68.02 KB |
MD5:
5d55d6f6c39d2ffa4eb245c53b1e05dc
SHA1: 44cc72ed6791cb27ad5cdcbdcd9150f70df3a0a3 SHA256: 972daf337104d53de5067c0536eeaf5e3345b11cde40dbd0390b242e256578fe SSDeep: 1536:T0znifozexvUwFJgCAWbSUSH82zaaTekXhacMYPg6/kjxm+U:4IXFJ2W6HtTechacMaL/7+U |
|
|
| C:\\Program Files\Java\jre1.8.0_144\bin\[sysfrog@protonmail.com]javacpl.cpl.sysfrog | 183.02 KB |
MD5:
206ef09df624779dc3a321b65489503a
SHA1: 1627be6fd9576202aebe3bccf7485cdc2b545c7b SHA256: c88314b0536dfd18046f50b7b4b19c48018882f9e6448844507a1c4a69d0c24e SSDeep: 3072:YStUt//aJS5Cgf6Tt5LfeVWWAb/rRhsqt3gflmwtzjW2llGfCIw5yXH8/7onnrFS:YSw3aJS5Cft4QDnRhsq2f/Dl/IwQsEml |
|
|
| C:\\Program Files\Java\jre1.8.0_144\bin\server\[sysfrog@protonmail.com]classes.jsa.sysfrog | 17.81 MB |
MD5:
ce8b1710280b64e7d35fc0ee2341751d
SHA1: 026557f2ec9a205b35af68779530798fdf5fc46c SHA256: e6a4606b05b21758a8271fdbcaf624f5e2aac311c7a829a548c4f80d602bbbb2 SSDeep: 196608:OoKcPAe2NRu6QZmuuV5Eem+6TQDwMfocxJe2fMJ0TA28Nke+kuaXMr6WtS:hKcH2NRJ8KV5EJ+qMfoxQb8yfRa8GWtS |
|
|
| C:\\Program Files\Java\jre1.8.0_144\bin\server\[sysfrog@protonmail.com]Xusage.txt.sysfrog | 1.39 KB |
MD5:
874b5321de717502bed2e023001c05d2
SHA1: 02287798ed12131c4c0a286245d1770d7e8a0d94 SHA256: 88fffa855146fffc2fcc02a059fdcba78ae14cbdee1e55d7432014695b06ff64 SSDeep: 24:x3TUxa8WECwEgV/Qh9Pzp6U19ArBPPC1JASdfLGKbngEqGYla+uTagR57R:x3TqWDghN8mrRPC17dfhbng1GQuTD57R |
|
|
| C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]COPYRIGHT.sysfrog | 3.17 KB |
MD5:
a78ab3fa13b5b9bbfb0c956fba92d4a4
SHA1: 41568e78209a4949a33e501b53edef61c273759c SHA256: 533fe924f056af6bd71a8d5e7fc38c529480a7d4165a9b2ebf1682547f95275f SSDeep: 96:ZrTbJhJ/8XNbfhY6wqE/2ehNO49V3Z0CX:1VhJ/2NaiX49VJ0CX |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]accessibility.properties.sysfrog | 160 bytes |
MD5:
8745c85c9b32ebaee2ff38027ac59e93
SHA1: 7b4ce00b391065d1a8d34bc5868be257ae786aea SHA256: 779b88367783b3e8f86a62bdf3daa343bed71bee5e4108bbbce632a17ba70fcb SSDeep: 3:tMfV0bMpUvVWenIZE9inQcuNPjxn3Fynw0T0L3Ofi1cayc:tMMvkenIQ/n3F+vT0T0i1c5c |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\amd64\[sysfrog@protonmail.com]jvm.cfg.sysfrog | 640 bytes |
MD5:
1dac13d1923730130a85c5ee4e296c44
SHA1: 54f976795590279d9617839e234e18ec3bcf69ef SHA256: 912c633bc89e5a91c033dbc4e2e1460a99ffd4d49aa92ccf62187990498d21f9 SSDeep: 12:HRaM4rp0bcr57W/OJ/eouK6993pnmlpNpwzVxGTcbQviUMR:HRaXnV4A/eouH99YlN0VkAbQviU6 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]calendars.properties.sysfrog | 1.36 KB |
MD5:
c12eacc58ff5df6b558c34d7df6929eb
SHA1: ecc4519ea4ec739d03b3a080b9e9bc7a72dc898c SHA256: 0d838a7706bbc432b3f1fd5d55eaeb83861b29e8b9278ec6667c14a075de9605 SSDeep: 24:ScYK6RJOIzicOLz71hhKnAabffPoGa5/S+ZQRJa/mejVF3qARs/ATi13+TIFnK:iBO9hifbnWhNKRQ/mKVYqCAT2vFnK |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]charsets.jar.sysfrog | 2.90 MB |
MD5:
1ab80dee9dbb5446c2b439ba670b1047
SHA1: 846c46ff85b1b8263623e34d53ac8521fd5fd2ec SHA256: 4d8c5b1c593e6f8dbd42675d26f7ffb155ecf66233b16e2b52644658bc04ecb3 SSDeep: 49152:Gbm5lQVbL4xUcW4uqJH2Chj0JvEnD5qtk5qRRk86Vm5DGj3UqZREjgv4J4FbHKWs:G6i0et4PjcoqtkkRnNk3BbEjgv4J4Fbm |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]CIEXYZ.pf.sysfrog | 50.05 KB |
MD5:
c51ed5b75cc83cf3d2ba6b95b28dd7af
SHA1: 32ed911e603ecf7623d596cc0e7d6e9d520d8e37 SHA256: 8d77ad3f4fd4467e7f8fab11d37c78a6d654e30e8ad11b44e82607b6653141dd SSDeep: 1536:7BaJC4gzsV5OtzxK4fKIayjx9LS8KSrqh:7eCuV5Otg4CIaI9LSOra |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]GRAY.pf.sysfrog | 640 bytes |
MD5:
c79616c6fb7871da81585cc7699b9a91
SHA1: 7f62b065ca692dad7511cfd52af2de866b2cbb62 SHA256: 96c09a2e53bbe3cfaa2e73cc74eb4f336c23ea9bec62e1fc4eaa822e3fb0c9e2 SSDeep: 12:CdG1WXUYkTSfe/SNcXX1rtI5NVs1dlBiFHujZ0I893qOFuLWkKKUvoV8F:X1LwHNWX125NVsjiFOOr3qOFuCkJUv4+ |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]PYCC.pf.sysfrog | 268.05 KB |
MD5:
b1ad1af2add9e8f88e055ed08a847b76
SHA1: 241a500a2644990d873be69db837b6029f06d231 SHA256: 29f1e25d1fd3521012d740324b8d127fd09bb384dabd5db84e62053d2331257d SSDeep: 6144:0iCKIehxH79hvVtAGqVhpmOk3mas6uTr+r9DUFkUzXNB1h:0iCKIe1Lt5qDzdanAKrRUfXNBf |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]sRGB.pf.sysfrog | 3.08 KB |
MD5:
4fbee2b112d3c1bf68209b6c6c83803b
SHA1: 0900a3066fa0d27320391b4f2cf78257bc38b3c2 SHA256: ca9597b55a55016868098d1ad4551b0396e8c5820970defe5e9a2ae6b514d853 SSDeep: 96:lAsT/IFh9nvmhHsd8hbT4rFjO1a18JCO5ihzCZAbw:lBrIFS88ivGsK |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]content-types.properties.sysfrog | 5.42 KB |
MD5:
f51f6deace4a94f72debaf25e88c821e
SHA1: fef63bfcf5f905b1cfc202b14c1124c43131c4a6 SHA256: c4d1d5f12c7b8a6c698bab3bf06845539de6ea96297cdd9c77199d6ade7e386b SSDeep: 96:qLXpCNwpXs16fSzR/QO6sWioFNhpD/Ec4EGnMAvVUTTQ1iCutYV5TAMupclU1lm5:+pCq81hV/QO6snkN3/EhX9OpWTAMuKEE |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]currency.data.sysfrog | 4.03 KB |
MD5:
cbf2d30958a9bd417ef432c567c48e66
SHA1: 646326bd0af5c1833ca3fc84906b014077c3de1c SHA256: 848eee1296116194e73ec9768e3bc3885ac611596d85c4cf9b9beec91b73010b SSDeep: 96:iz+eMmthu8DMh7nF3Cue6c19ST+7HnBcOlVbxLRtlJBicw:izPthuAKrIZ6c19++DnJbxLxC7 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]ffjcext.zip.sysfrog | 13.83 KB |
MD5:
893170acce68bd5b03193aae9bae830f
SHA1: f1ac1ee0b38bb49ca78db97c70274df7ecfdeada SHA256: 1fbb68c47d49af82f6bdde69f221cf826d835d67a1f26bd4bf7ce39cdfe3c8ae SSDeep: 384:njN+Cp6t74SuTyTV5V9z0jjSmn9wk/9nGQr0:nxB6Zz0ntnyka |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages.properties.sysfrog | 2.80 KB |
MD5:
75f1acc83f8bb726c5fd8eb85af63b2b
SHA1: 42b8a9d1119b077eeb2adf26fa15916e14d9ca0e SHA256: 0737280a5243b272eeee53fce0c450ade05302876b8f4eef5eeb66a730a18223 SSDeep: 48:0MHutjWcR+2raFgz7RiQKyCY47WL3Y7R1mV9ewAfRoxm+cfRrBNJH2L/PuRk0:0MMjrRfaFE1iQNb4+4jwAZV5rbILXe9 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_de.properties.sysfrog | 3.23 KB |
MD5:
ae1ae233a223808727022eadb2390c5f
SHA1: 82b77c18f225a72d7cd4521b434a5d1bd9972cea SHA256: 979ba6a4602e983734f9783b249014be1feb34e9ef692964400d6ae740653455 SSDeep: 48:n6IrCRJAqqQu7AdE529npI/aAgHEkR5kAO7A1zVj0yTyhi6pmPdCsrXgkJtj:JYE521pI/aAgkkR5ZEA1VITi6pmIs33 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_es.properties.sysfrog | 3.53 KB |
MD5:
8f8f7c849643dfcd10109fdea490d629
SHA1: 57d03d63edb9cac4ccb947b1535835805de1d29d SHA256: 2cfd47a2a5fcfa979657aa0907be5ef4ff9de1ecb66f0af9c61aa30e3e30b6cd SSDeep: 96:ju+jQl42tKYLLpqPeABL1t5l7v+qgk+G2cr:jZjitK68PeABLx5+qpf |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_fr.properties.sysfrog | 3.34 KB |
MD5:
fbeed57ab1ae79445f7a38452069f3bd
SHA1: 3de693af5cbfe2606a3b250a97ad87af479461ad SHA256: ad3a131f5637a4d83adc6b3520e5cdb223629e1c90fed6fff7353b499e85753e SSDeep: 96:0MJkpEGcyV00ArJHiMpT6BCBPjxbdVi30wL6m3:lDnydApVTfDr+6m3 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_it.properties.sysfrog | 3.16 KB |
MD5:
bd9016510a130238a0c6a2e2d3563216
SHA1: af4ef1cdb413e4a8ab0c59f5f16593cf4a8f4c5f SHA256: 88e521991fe76e19aca5f5f25d281f3813c01f78f6273a7c934892f473989205 SSDeep: 96:0MJq9daW7IvgIhwMRuuK28yHN7NBxijuXbNcuSGk:lKwtIIXRU28yHNTxijuXbNcu2 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ko.properties.sysfrog | 5.59 KB |
MD5:
8f58c5ef1acfac17a70a19f9060c3bb3
SHA1: a9ad93b968ca316069f63d461665df797f38a114 SHA256: 41d568c5614984d7e1d7fe2f163941308933762385be7817619427c2d2a27226 SSDeep: 96:71uVmJm42DtRwPbUALl9zCUAcQi5oC3Hi+fyzm2fum6VImY9njepRIL5//tqWDc:ZurDtGPbUEjfF33of/6Cm2qDYtFqx |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_pt_BR.properties.sysfrog | 3.22 KB |
MD5:
0dd49473b9a20b82988208866cb12647
SHA1: eb20647fc9126368881244e09af94c4eb3b1eafe SHA256: 418c93c1024a2ad85a883c34b2d1df372aa72552884ac1ac3051aa87e6d2a162 SSDeep: 48:6NlTZamZhV757LfRSj9w18SdWUrtCzyPkBHR/YLat8obMmDns7lslo/6b5aeA2IO:6NamZP5RMwwokBmay6MmS2Fb502IGwNu |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_sv.properties.sysfrog | 3.34 KB |
MD5:
a9db75c4375e45ffcc0f8f577c92cf59
SHA1: 4ef22cae0eba11cedcfcd4001c128428ee4a8f29 SHA256: d9e1bff74b947a6c20ab6ae61431115c230e700e104722e7d3070567762e806d SSDeep: 96:0M0S526HJ3mCO4XnGepNqQ2N+HTmywwyA3XTsnL:lfY6H9mS8Q2wHqxwy2DsnL |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_CN.properties.sysfrog | 3.98 KB |
MD5:
45b49840f90b7aa07d148b9043edd4c5
SHA1: c9415e9e2faee91c0d4f5dbd52d3f3ab9bebe9d7 SHA256: 4f7a7d1813f658e41d5cb7e0cd0035d63b4960e21dc39049f899bf3423964464 SSDeep: 96:nayy/abQiHVFYz+tXqas07x0tY1/VgmvM24Hxvon0c:nHA4QiHC+1qL072s/VJMH+H |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_HK.properties.sysfrog | 3.67 KB |
MD5:
d523bd8b63b09ec33a089a092790285f
SHA1: 622755095d6df405307c7152c4ed72d78ea15481 SHA256: 4e66b494f6f28a5bfefa935e9acf85700cf6ffb5c5fbf5c7b77439e5cbbf373b SSDeep: 96:nVGDNKk1xK+hkbf6OXxWuGLDNZr3IkPDJeysGRB6j+:nV8DxbhkmOXAbLHrYw8Gvo+ |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash.gif.sysfrog | 8.39 KB |
MD5:
eb14328d84c5040004ffa7b2d11e235d
SHA1: 96db310bc192e3b256e4d09db2307f2c0f25ca64 SHA256: d1fe93a3873dd59b33eecb84844f38cb2703e4d968c68e560e423042eef782e9 SSDeep: 192:LthkU5//XR9PTBG94+n1yA+wrWIv2978yGfkLLt/Z0rKORy:vpB+1yfwrZq78S3P0Jo |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash@2x.gif.sysfrog | 14.92 KB |
MD5:
f2381b0d6d2593a120be824f4472f137
SHA1: 49a1ffe3bd22666e9f6c02f7fd5d85ca55ed622e SHA256: 8ee6f91345d1a6912b847c449aae79f26e57a254238ec55f5e5336d7b4e2ff92 SSDeep: 384:8ryM4UeE6Cxuj51qhq5iQIXi3Y3psgyGdvsyIggz:8D494U514qRAi3Y5sgZdJG |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11-lic.gif.sysfrog | 7.62 KB |
MD5:
0dbe3a394a23fa2c6c4f2f60882713fe
SHA1: 420774a6403db89f7c3097c25a6770d6287b76ee SHA256: c9c7f7ec1289360df8a3e4863f9d716714ea5ec28921c19371b06becb68cf8d8 SSDeep: 192:LG5ubwRQJnYiFmbNu2x2MapLisyOXOUAsar591XBihmK2Q:Ld6Efmb32YsyOXOUBylXEcK2Q |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11@2x-lic.gif.sysfrog | 11.97 KB |
MD5:
01b48e915d028b00c70956240a952807
SHA1: 0a70ad605a1f9d876c3dc34ed99b525652d485f1 SHA256: 2cf4de416c19fc30a406445987bbbad8443c3e7bef3d9b8544a693bd15131489 SSDeep: 192:h2JIZHf+E9NTY7dwrY9b4ufg9p9jFQsu0JCgwQ9huZ5OBM/XBlnUou4jRZk:h2mHv96eW4uYj9jFnuMCQLu7Rj9u4NS |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]deploy.jar.sysfrog | 4.81 MB |
MD5:
c2c54af4b25e6a92d07bf27e820add06
SHA1: adbef625fdfaa2d2e9a4b7ee5f591242c68df5f6 SHA256: 51f7fb0c3d24fe8d7753081015c95267bea502497d8995c6e742ae89c14a0036 SSDeep: 98304:e9WHWD/uUfamxZXoUGT76jS54V66T/U2J4IPhdJ4f0gnJL:eXDWU2UGT+jS54V6As2J4IdJ4fx |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]access-bridge-64.jar.sysfrog | 183.62 KB |
MD5:
b48a13aa22ed7b30fd1af821819cd3a4
SHA1: aff2e04efe4609a5bd687bdda1738c54131fdea7 SHA256: f68ea8a49ec7ee75cfc4c220dbf2432333cfce3732e2954bc74927f217a63d0f SSDeep: 3072:qGp1kPzBSsemnm6X7/myC6d2blyk0uGqq5fzc8ZU7Lilg:qGPENz7lmhy1uGqx |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]cldrdata.jar.sysfrog | 3.68 MB |
MD5:
3e5a00f6076e90a7b6cbf14a889b555e
SHA1: aef6ba1eb9602f5d37c14a666cdf8b37554a3571 SHA256: dadfe70055786d7df5be4ee7d616410bf5c3264a3ebb63a2bcf1b443cc0269bf SSDeep: 98304:6SvkkzomBtDqvX8u7lOOqBXIwRFjRHUNknumTYYNCohyZgDHeRJ:TsqLu7lO94CXHUNknumVXez |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]dnsns.jar.sysfrog | 8.09 KB |
MD5:
dc29cd7449160076967b3395256b34be
SHA1: a43aa06225c62f534c511804960dd1edb2acc420 SHA256: 46e597724f9915f4f9cf994153edcbab3c4d0e550d23e2a4e037987c474bf420 SSDeep: 192:kp5jdyJK3xRM3n/jLPsw1hSm/EJLqVxaE7YnC7Pptz:kzEY3GnPZhKAVxjYCDpl |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]jaccess.jar.sysfrog | 43.48 KB |
MD5:
cef1d3f1509ce553d7757ab1d93e11cb
SHA1: 29540612b79be5fda2003ea9d84f5076cba39f56 SHA256: ccf11a84a74c948de33346d9b6853136004cb3f3f5193c28e5e6b22af5140336 SSDeep: 768:1RfmU4jEFjeyksjd+GcG/IWm+6s0SChQJF2nKkEZ457EYmXMJkbt3W:v/DFjjRpf/0NsErkAEeJ6W |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]jfxrt.jar.sysfrog | 17.40 MB |
MD5:
031ca22338c97187a2bfe5bedcb7c8b4
SHA1: ba8ffa942e6825b6f7d6aaded43a9cbb50cf3f24 SHA256: cc739bea1ada6ec1dd5f379544262293480b0ec8fd62bf1655b80b2ba10ba46c SSDeep: 196608:dwMcaOZxxAQ7oiOnkvUCKPgDpSd8W5SQQoXhE7x9D9cs+4:+nUQ6kvLcgDpedXQxh |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]localedata.jar.sysfrog | 2.10 MB |
MD5:
b30e74b87078996431e48f136d8c70f7
SHA1: f910aaa4995243fa8c5dbe1cb439b5cbd162b6d5 SHA256: fddec179423189e9867731b1159a1242c70accd29009ccc9d515567284e2fe87 SSDeep: 49152:bvBv9n88cPcf82TwCULfmljzsPmiBOhyua2kbPob08S9:bvD88XTwClj4Oi0ynvwo8W |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]meta-index.sysfrog | 1.44 KB |
MD5:
2f0f8534687a4e73aa5cfd3ebbe275cf
SHA1: d06623889d53ef997ddd4da44ebdd8f9bd9f2c4e SHA256: e39fe9d5b65000b9a8fbbed2d9d7374bbb0f759e5080c01f238c2328cc24cf48 SSDeep: 24:RslzZia6v/JIVYv+p3umaGxOxH8D6pHVowZsNeWVodmTyVRTNWKjNFrRzXV+1im0:RsZZivEpVBxOxcD6pHVQcWK9zLNo1itV |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunec.jar.sysfrog | 41.20 KB |
MD5:
ba081ed5dfda99cd1982e7f06c824e1b
SHA1: 1399b10aba885ab82bf6f19b8e6615861db6695f SHA256: 7e241ec78331bc141ab1b01ac3a05920e847e518739c4884fdb165cf8bb18458 SSDeep: 768:3Li3eO3X0ayGbIUTlt7BaimIRTakhq3JbNLePA2IyDvxhxfrEZX9:VkX0ay+lQIRGkm5NLaA2nvfxDq |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunjce_provider.jar.sysfrog | 273.61 KB |
MD5:
2ee0662d64b7ee063dbe99cc7e77d29f
SHA1: 6f23faa306f0bbe2b3d74a94660b111687ca193d SHA256: b941caa00c851f079d67438a10b401e07f98bc9ba21cd4569a64c454add60742 SSDeep: 6144:kWGppz+aSClLHpJTwLV2lvh8rqjW9ICzezNjox9Nxu9:lo5rjZIoNhG+IICzqloG |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunpkcs11.jar.sysfrog | 245.44 KB |
MD5:
4edbe4424662677e2dc36de447be7b38
SHA1: 39680d9c7114cc4c5efccff23c2ec6c0fa44ecd6 SHA256: 6a4cfe8e546f34fd222cee9eb9ba0fbb41d7d1b07da26f672e865b4e9c54970d SSDeep: 6144:C4d0nUjvUWpUYVm2n8raX+B/j3Xfjv6OudATQ:C40UbQ28rtNj/bcdSQ |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]flavormap.properties.sysfrog | 3.84 KB |
MD5:
f7d6b6f894345216801d284cf7902f2e
SHA1: 3d5b01514016c00107523865f7881ef984342c7c SHA256: 74844c5e91858493196922225b08323ac89e8cb43e2a4d75c43cf18a13b11748 SSDeep: 96:/1bk7Ztsko8dX2ePC9fti6I3/m0Yh2R2csblbCNk0+/TmUHeyH:CwwSbI3/3YhislbCNnOT7H |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]fontconfig.bfc.sysfrog | 3.69 KB |
MD5:
16e60ad27008e51f4d3569a8c4981f2c
SHA1: abe095d83a93dbb7fe1ab0f88836898817513314 SHA256: b85c27c4e727875d87899d46d6be1bcd194a072f54c5121828844317649bba54 SSDeep: 96:YXSubV14vqq3h+ndPUo7KuECisZFePTTz5yUhtggH3qEUIG97m1vPQy7IifS2IDH:YXSoeqq3gndPUo7LFirTHkUgH57UIy7y |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]fontconfig.properties.src.sysfrog | 10.33 KB |
MD5:
7d04a42466b0f5c1d5c846253f2b1075
SHA1: 795992fcc4da1ab76dc8ab046072bb77ef858b19 SHA256: c04463177bb3a885f694da3bf1cf0795cae3867bf5c7bd401f83790f53970b50 SSDeep: 192:+Zqi1ha7RU6I7hKfbHU2/9hvexJg2mWLBQ859NPGvqVNjeGMalaGxncPwWyHBPwX:qhalUX7a02/9hvpHC5PPGSVNjeGVo7wc |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiBold.ttf.sysfrog | 73.39 KB |
MD5:
1c4aac976946c1e39b40bbae8f3a588f
SHA1: 7e2ee215ef57baddd9d614808bf26ebc779a0957 SHA256: afc981ca68ec01f1684282ffa09605ca79ce3f31a1f26e6b098dd31a1c5a0446 SSDeep: 1536:eMi+zeAFwfmRssvSRsEn1Ocmo4Wkpy3WjrBJtpGKoVKN9GZN6FIeYW3:HPeA7ssvSRrn10kW3XtkKoVS9ZNYs |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiItalic.ttf.sysfrog | 73.38 KB |
MD5:
6a31e1bc042d6f1c50485b1e01a7e431
SHA1: 8c20e31cb1c67799bfde848dabeb317786768ad8 SHA256: eba228c8a0471a1b6c64f8515127a41705b7482c5bc700e68a12a84e5ec6bd81 SSDeep: 1536:8ZGqwDBSs2C+eSChsHdKqpWHDStAnjocr7K+03sdovT9w69QWPB3gu8XZ:8ZnwN/2JChs9KgYOgJ7KL32o/DgJ |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightRegular.ttf.sysfrog | 336.83 KB |
MD5:
865a9cdd20b4fdab19da0ab70c9cd824
SHA1: c932c0a3ddb9b1053cf8714cf5dc33d86f29944a SHA256: 4babf4a1b4061bf2cec437938e7f6405271ab7255e193c6bee1af03d7abf63ca SSDeep: 6144:2VV+34hfTOIUti+7DzVi2yV5jOFTuY67Z8DYuD/EXwMjCHyr5I2KkPH88f2KMW:26IhfaICi+nzV1qfkYuD/EXNNtItkv7Z |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansDemiBold.ttf.sysfrog | 310.45 KB |
MD5:
a66cfe4a3c1ff1a272e60e630461618f
SHA1: 2e54542cb2f2bcaab896b16b221c1194d40ef7fb SHA256: 6d6ff0541498b33189fd51a08b7c554022c20b304909a7e0d9aee48bfb6c7b83 SSDeep: 6144:YjInKAxYcUWj4p6aVc/YujlKLOP1bm4xZZ5Nj8EPyU9pAo7fmBxHVlm:YEnzxY9W0pUYuhKLOdC2518EF2SmHVM |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansRegular.ttf.sysfrog | 681.88 KB |
MD5:
859a0d7b8753d41cab86d34aae0bf878
SHA1: 1b36baab1b6c3231a98088dabc02ce0fb21c7b84 SHA256: 55cfbd9fd0fb2a00172a2e0ed43797e5a4f45f73512bce6dfb447c3756824f09 SSDeep: 12288:ipzrdBv5gmOqgg3sggEQhhsI77z8vyQOOqoA/iKNoAJjcJ1ODlZLYDfggK:Izrdp5gszQos7M2OpA6gvjcJ07LYDfgJ |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterBold.ttf.sysfrog | 228.59 KB |
MD5:
c4efb7e9adce79d27df5c5a1f0a05f69
SHA1: ac47468a63d987d3130feb7e30c7157b7b4b75a4 SHA256: 7b8b4ed51acba75a1d3da53de43cb2bcbc07a391e88a666ba27d8a233af27d5a SSDeep: 6144:uZ5sfMSbSHv4kXWEzs+lfd2TeHNOAHcks:uId2v4kfs+lfd8eHRHcN |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterRegular.ttf.sysfrog | 237.02 KB |
MD5:
d37c1f61172c8762fdb351893a83e1cd
SHA1: 1cbb3dd7cd5669c02ff1481a25fa24949562caa9 SHA256: 287584c35543950effefc139964f19816530a46193f0f28e9d9ccaaebb256db5 SSDeep: 6144:TAy2zz/8waF7JvZTKBs0jBgJZz816p4eB16:TAP0wGJv6TBgT14eBg |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]hijrah-config-umalqura.properties.sysfrog | 13.64 KB |
MD5:
2e6b67f4c9459b99eb94401b1f0f7cb0
SHA1: 1cb626bd923ae1c4567b8709399031f66512320e SHA256: f3573c7fc382e597cef6cbbab4312d94c7cd7112debfddc3ae20b9f45fbe063a SSDeep: 192:dR3TXEGEsOk9Ohu4ZfPvQ8MKf9RDMfSY1aqYS+ZgzMjI1QTpAVCRLVeoiE/VObW5:fdFOkg3vmwDWSYQnSve2cHZvO/0 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_CopyDrop32x32.gif.sysfrog | 176 bytes |
MD5:
2f755eb6e9de508b3f694d29da510183
SHA1: a2066bebf2055872f70b69e3575d724c9b7a92ff SHA256: ffab40187f7bad968c97701eed4b6da612c23c39bb7e8db51e9e9d54e56f0cc2 SSDeep: 3:oOV7PGwAMlDmzqZXz+kcnDTjgx0eRxPYQc2v6GrM/YzNSur4Rx4DMltNeC0VLov3:oOxPGdyDm2JqP00eRO4iGjN9soDMjMCP |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_LinkDrop32x32.gif.sysfrog | 176 bytes |
MD5:
25eb173bc93dc80c7296a224aa5d6fce
SHA1: 30efdc46124297d777df342b46954fc003b3030f SHA256: 78be41587648d3a9f3f62d60195cc6cb0e8631b0d0fa564d90f44af813f664ae SSDeep: 3:oOV7PGwAMlf2v71ljHihQ1QKGggRAdq5nBPIpF1Qs7xP5yJ58p:oOxPGdyObjj1ZdCkl7xP5yvS |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_MoveDrop32x32.gif.sysfrog | 160 bytes |
MD5:
b85403e01a90ba08394c10f62450744f
SHA1: 92e5c798cc32622ec2f80cbd44dbf1299c6ef76f SHA256: 0fd934d8ff543ff0d0d59ca4a41fae745b24a075fe532d079efc4ab4ab10d16a SSDeep: 3:oOV7PGwAMlgNZIXzGZRdDcE8B8sIXJTMfVXYJVdnx6aa2ZDuaJIo:oOxPGdySZQCZnjRXKXYDdLxZ6Wf |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]invalid32x32.gif.sysfrog | 160 bytes |
MD5:
02dc67adde23231f333a09341a020297
SHA1: 8f522b5c69fee9622ad929c51d7745604f84bad8 SHA256: bf7fb844c7649557ea442f960fdce783f22262f63178c0ca226295b61c5f892b SSDeep: 3:b3mP7tgIptshMbJTuG2Pk2Ew0ZE2j4MNfyyYQNYHYrrn:b2P7tgIwGlKi2ELhj4KbEY/n |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]javafx.properties.sysfrog | 64 bytes |
MD5:
49b0bf39a1aac67fbffeca3d12943d45
SHA1: a1f4e8e17ed313297c661bc5f6df6252a8a56119 SHA256: 1f037030424cb939e7265aef4007a4246619c64ca79ab1d6fdbc02a2d25e591c SSDeep: 3:nS/qBovo5hYbt0pmSHz/n:MwovKhAQmyz/ |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]javaws.jar.sysfrog | 922.05 KB |
MD5:
2d57caeca2eadfba0eb4f59e6de199e1
SHA1: 2edd134b02571c4e20b19e1dfe958e1cdef8075a SHA256: 70ec5c580883e940691527b348ae2256691d1eb9581e23a1452b66ecb0202959 SSDeep: 24576:Ki4qgCPz9rpclBqhQYmpYUEIXkv5v4nG3lJ1eo+X:Ki7gCLXkpYUHUv5gnGhe7X |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jce.jar.sysfrog | 113.72 KB |
MD5:
02c23c9144810771cb65a2510f9406ad
SHA1: a668d110a6087549512856cb2e0dc1edce4a891c SHA256: 70b7d8211fedd4a863157f4959b0c8e6ffab868e6f6f74d90ae464793e56545a SSDeep: 3072:INfT+Q8Ay4zfigJ7u7i0W7qavQ6+Dl8fa8Qt4QZTHpQn67:It+hZ4zV2W7vPJQtZZ7pQE |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]default.jfc.sysfrog | 19.64 KB |
MD5:
714b6560dbbfff98dfd036bb5065adc4
SHA1: 969e3247d40a95381b58d2ead0c43c0a4653ca28 SHA256: ad938440eda292648332650f9d9556cc40616679014e378dfd51cf104bfe41fa SSDeep: 384:Oc5NKJ5ZM6FyDZdOa7l1YhvUiPZMmQZ8XQQXWai2AqbQfA+aA0:O+N8Z0Z1YhM8ZH08U32vQlaA0 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]profile.jfc.sysfrog | 19.61 KB |
MD5:
00b1e61e3de3689d5630010fdde9a10f
SHA1: be13fd57bac76930c8211e8c4bbfced77ab878ec SHA256: c978ac6e77b688f86ed7cfff8bf03eda346bc63465a7038088c65d4bad606d50 SSDeep: 384:OX3vh1qv7+fRo58yxhL1I2U7924ZuK82l7QhyK8vyyqST:OX3vHE+Jo58ILQkuDlTqyt |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfr.jar.sysfrog | 547.45 KB |
MD5:
90cc0d6a583843e7a51728dc38df3ff0
SHA1: e975924a44d333b929382fea92da96cfbdae460c SHA256: 800a3d7702a7bdcb35da38192ce0807910ca35fe1653bb3b5c58bbb545e81d88 SSDeep: 12288:Nb9PaeA8npzFrIM2Hg/rJkpOBjnLHEA2EYrEIRT8IC4Fv:NxPaeA8nUtg/Fkpw5SHEy |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfxswt.jar.sysfrog | 33.14 KB |
MD5:
7f644b1739326df7bb09d8fa8ac59d0b
SHA1: 9ac1f1673141326d0c944a35bb4bcb695bd2d17c SHA256: 95fe7400bd1bdb47f3e8c0ceda554ecafce126b1475bf4e8350d430b63d8ee39 SSDeep: 768:6LrYUIaK5/fokz7u5ZtVkXQb8KOzUBG10tesrVP6wQjaW:NaK5/fokz7IpkE8HU810csBVQ+W |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jsse.jar.sysfrog | 570.89 KB |
MD5:
4b148f6906ad86f688d11155d5bd53f9
SHA1: 14f58431ba7db41edaeadff019c38b40b2fafb61 SHA256: bd57d527e97dbb01d2a921facee06ae4001e469797f1b01bff9db8042725f43b SSDeep: 12288:zqIxBztDFkA/jJKZdhJzKJOJ4MakGc7cPUcRbC7B54yNz/:zpBz4AIZdzSs7IRMpNb |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jvm.hprof.txt.sysfrog | 4.14 KB |
MD5:
b119cde3a9bfefac0c150f369badf2fa
SHA1: de2e22802f82cbe7172f0cd9787f843c56b4ccc8 SHA256: bba467c39fc0f4d13bb68c315f8f2a57ca73f46ed88fc1ffd0e79875bb08e77c SSDeep: 96:7i7BAozJndHClWdblGwbeZJR1fQnnpeiloln:29dn8lSZGwaZpfQnpeioln |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]logging.properties.sysfrog | 2.41 KB |
MD5:
30978093ae44c5fa966652cbe759e095
SHA1: 41a3ec0f28ebed35c5c0b94cd293c26be4e3edff SHA256: 7d0cc6f738bc55bdbaf87f830eb4b9fb04f3cfe4edc06856ec95256e8e2391ec SSDeep: 48:pE9gDpbDtbGlxa239F2a8SRwrQGZpRbRBj8WjghwtfH6pnblzcFiT:pE9upPJG7a239Fj8SEQGppg2t/8b1cE |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]jmxremote.access.sysfrog | 3.91 KB |
MD5:
9dae252c125db7c9df63a7b9bb199ee3
SHA1: 953212fbd2fa4ecf926042b2d5d3300287204af1 SHA256: 769273c15a49705b429367ec39e317a28ba2f776b57b36d6d2bb62ea12446c74 SSDeep: 96:pE/U4JVgzRyL0Y6XDKBHh5uB1Yr7rLL05DtnfjkvwDx:CSyL0YFBHnuTYz05x4vwDx |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]jmxremote.password.template.sysfrog | 2.80 KB |
MD5:
876341cbabbb27c26d6f4f959ab8272c
SHA1: 84b765cb6bcece89559884b70879cfbb71a2218e SHA256: 8d932550ab27c718a82c3f70877678881929efe04184154d2e3d0cea091a93f0 SSDeep: 48:gmK0fdeR1hI28pvWpLaSrw5H7RGLipfRkMcXFFDxvoR10WRnN8R:gx0fdqhInc0JdGWtbc/d/24 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]management.properties.sysfrog | 14.30 KB |
MD5:
45a742f42932c74dcea96eccf18fb03b
SHA1: fb3debe499d16d3cde870480124fb1f2df2e0fc5 SHA256: eb011171b0855a609d05abc345bba79390130870b98274412a40c77dac9d9d7d SSDeep: 384:aHvD9oLb5ri9zecxbne9GcMeKvOPx2969bJjqv1IQd:iraLb5rwesOGGKKVMIQd |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]snmp.acl.template.sysfrog | 3.31 KB |
MD5:
303fdf7995691796b22acff6dda83a49
SHA1: b3f7d8c404bbe8b2bd360b774adb2e32e2277b45 SHA256: 15cdcccf782071427609ffb32e0af45d3cccb9f8db08c75e1863af0e23b8e8f0 SSDeep: 48:5ZIpYJT/ccCZsGG7xYXn8fAJRGYXswV+hvHqZTZBu4yEHi8LJ99dc2sRGzxCHy2:IQT/t5YXnheqvgoZBu+i8LPc2SGEH7 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]management-agent.jar.sysfrog | 384 bytes |
MD5:
b12de64850bf682c905cba3121b36101
SHA1: 8c808f1dfa856f1fa02dce7da712bfd38e34db4a SHA256: d610a010c4fddc6ffe5c32b9d7a481c8fb75bd40004e7d9ef3cf7ad7277cdd60 SSDeep: 6:MR8ARf2X3C1ycAoWf5GxxBK9lg5t4xvCQnLag1doS0X/uEQMcE+VaCGHolMkA1lX:QRG3C9A9x9lg5UCgzCTh+a6AH |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]meta-index.sysfrog | 2.08 KB |
MD5:
68cab851eb851057f10a17609a91acd6
SHA1: 712aa3914b31ebaccb586c802fd81e09b2375fd0 SHA256: 62f504ff82fac98d49b2d986962c94a68f747a8950d3c68b773074c27a93c2a4 SSDeep: 48:RsZZivylsL0exef8NpX9fDCQsIl8YgXJJn6Ah5:RsZ0yP2U87XJPsIB+F7 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]net.properties.sysfrog | 4.38 KB |
MD5:
a177af1e01b46ab59bd303702e2483ab
SHA1: 02515a53a6ec758b790ff36a85b8e328dedfbcf7 SHA256: 399fd381b7917b26b99f3ce5ec100aba99e7250212e49c5623f2680e75207c9a SSDeep: 96:pEnRlTK+IBUf0mKWY4BA21yPuwnwq7XmKXiKB78:c2NBUeWY4C21yJnLyKXig8 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]plugin.jar.sysfrog | 1.83 MB |
MD5:
ffb34c3d715185b66492ba3960ee72fa
SHA1: 86053a1cfd5078456cdd602a696f98751f9b9e14 SHA256: 64f6987499a447bff3974b2a8b39a4b124d27b26af320e47a7fe882d8598fb47 SSDeep: 49152:wZHj93+22yiVM9NdO0CFWu9B9KtjDtVmceMmgKpRZAwUM9eLAjNDqPoFWIdsmcQA:Ej93fiVM9ChWu9Mn6MqCuQLAJuPo1+6u |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]psfont.properties.ja.sysfrog | 2.73 KB |
MD5:
90e965578f7ca034e7604f747a31bd93
SHA1: c28fc16ccd5ab8b0f89b1fdcf5a723878f6cf493 SHA256: ca0dd7ad0d2f6177fcde77ad355cbb4d71aa17274ef53d57af9127f1e4469fa1 SSDeep: 48:lLBVGvkTHzOWyKGo/FWYrrQF8mTeJIUiVbs1r/XoygNKgy1EY8/nFq5:lLBV44HSW5EarQF8mTdEYyM9/Fq5 |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]psfontj2d.properties.sysfrog | 10.16 KB |
MD5:
ad2fcae850be276b82c89229cfb4a072
SHA1: 8da4339a49048c223ee69fb71364ab59100e78b9 SHA256: 3ce6bfcd9759d9f6b364eae5331a4d39b5d1e937057e97d53afcd30057cc4fe8 SSDeep: 192:epy8l5VVv2P4LqioZSUHJFuA7QWjA/Toit35QS8kTwBsABsMM:KR5VVw6qiWnF/Qb/UiF53dwBsn |
|
|
| C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]resources.jar.sysfrog | 3.33 MB |
MD5:
78dbe3899c911855f8d5393f01b0399c
SHA1: bcf3aefef00184899f714d26e7d02ce1c0ed17a9 SHA256: a75967057b26f5bc185a89c360e1250c0c489596926aeba877288306b2ce75d3 SSDeep: 24576:EaoH/MHfUTqtB803SdoSHqyy5+eXO/g+snvSiw93rnt/7eZhPZmehpsPG:EbHosm9vSHG5XOY1nvA7eZhPXH |
|
|
Host Behavior
File (31101)
| Operation | Filename | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | C:\Users\FD1HVy\Desktop\sxidlt.exe | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL |
|
1 | |
| Create | C:\Users\FD1HVy\Desktop\sxidlt.exe | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | temps.key | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | temps.key | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\ProgramData\how_to_decrypt.txt | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\how_to_decrypt.txt | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\Logs\[sysfrog@protonmail.com]downlevel_2017_09_07_02_02_39_766.log.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\Logs\[sysfrog@protonmail.com]oobe_2017_09_07_03_08_57_737.log.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\Logs\PartnerSetupCompleteResult.log | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\Logs\[sysfrog@protonmail.com]PartnerSetupCompleteResult.log.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\SafeOS\GetCurrentRollback.ini | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$GetCurrent\SafeOS\[sysfrog@protonmail.com]GetCurrentRollback.ini.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\$WINRE_BACKUP_PARTITION.MARKER | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\[sysfrog@protonmail.com]$WINRE_BACKUP_PARTITION.MARKER.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1025\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1025\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1025\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1025\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1028\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1028\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1028\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1028\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1029\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1029\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1029\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1029\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1030\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1030\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1030\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1030\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1031\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1031\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1031\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1031\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1032\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1032\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1032\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1032\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1033\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1033\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1033\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1033\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1035\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1035\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1035\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1035\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1036\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1036\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1036\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1036\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1037\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1037\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1037\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1037\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1038\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1038\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1038\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1038\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1040\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1040\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1040\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1040\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1041\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1041\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1041\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1041\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1042\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1042\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1042\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1042\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1043\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1043\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1043\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1043\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1044\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1044\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1044\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1044\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1045\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1045\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1045\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1045\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1046\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1046\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1046\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1046\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1049\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1049\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1049\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1049\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1053\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1053\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1053\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1053\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1055\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1055\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1055\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\1055\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2052\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2052\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2052\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2052\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2070\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2070\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2070\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\2070\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3076\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3076\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3076\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3076\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3082\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3082\[sysfrog@protonmail.com]eula.rtf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3082\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\3082\[sysfrog@protonmail.com]LocalizedData.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Client\Parameterinfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Client\[sysfrog@protonmail.com]Parameterinfo.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Client\UiInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Client\[sysfrog@protonmail.com]UiInfo.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\DHtmlHeader.html | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]DHtmlHeader.html.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\DisplayIcon.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]DisplayIcon.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Extended\Parameterinfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Extended\[sysfrog@protonmail.com]Parameterinfo.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Extended\UiInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Extended\[sysfrog@protonmail.com]UiInfo.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Print.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Print.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate1.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate1.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate2.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate2.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate3.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate3.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate4.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate4.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate5.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate5.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate6.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate6.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate7.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate7.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Rotate8.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Rotate8.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Save.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Save.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\Setup.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]Setup.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\stop.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]stop.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\SysReqMet.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]SysReqMet.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\SysReqNotMet.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]SysReqNotMet.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\warn.ico | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Graphics\[sysfrog@protonmail.com]warn.ico.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\header.bmp | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]header.bmp.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\netfx_Core.mzz | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Core.mzz.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\netfx_Core_x64.msi | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Core_x64.msi.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\netfx_Core_x86.msi | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Core_x86.msi.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\netfx_Extended.mzz | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Extended.mzz.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\netfx_Extended_x64.msi | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Extended_x64.msi.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\netfx_Extended_x86.msi | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]netfx_Extended_x86.msi.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\ParameterInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]ParameterInfo.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\RGB9RAST_x64.msi | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]RGB9RAST_x64.msi.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\RGB9Rast_x86.msi | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]RGB9Rast_x86.msi.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\SetupUi.xsd | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]SetupUi.xsd.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\SplashScreen.bmp | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]SplashScreen.bmp.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Strings.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Strings.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\UiInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]UiInfo.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\watermark.bmp | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]watermark.bmp.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Windows6.0-KB956250-v6001-x64.msu | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.0-KB956250-v6001-x64.msu.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Windows6.0-KB956250-v6001-x86.msu | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.0-KB956250-v6001-x86.msu.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Windows6.1-KB958488-v6001-x64.msu | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.1-KB958488-v6001-x64.msu.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\Windows6.1-KB958488-v6001-x86.msu | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\588bce7c90097ed212\[sysfrog@protonmail.com]Windows6.1-KB958488-v6001-x86.msu.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Application.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Application.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\HardwareEvents.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]HardwareEvents.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Internet Explorer.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Internet Explorer.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Key Management Service.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Key Management Service.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Client-Licensing-Platform%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppLocker%4EXE and DLL.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppLocker%4MSI and Script.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppModel-Runtime%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppReadiness%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppReadiness%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppXDeployment%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-AppxPackaging%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Bits-Client%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-CodeIntegrity%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-DeviceSetupManager%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-DeviceSetupManager%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Dhcp-Client%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-GroupPolicy%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-HotspotAuth%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-International%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-International%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-Boot%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-PnP%4Configuration.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-WHEA%4Errors.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Kernel-WHEA%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Known Folders API Service.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Known Folders API Service.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-LiveId%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-LiveId%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-MUI%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-MUI%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-MUI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-MUI%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-NCSI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-NCSI%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-NetworkProfile%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Ntfs%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Ntfs%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Ntfs%4WHC.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Ntfs%4WHC.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-ReadyBoost%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SettingSync%4Debug.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SettingSync%4Debug.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SettingSync%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SettingSync%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Shell-Core%4ActionCenter.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Shell-Core%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SmbClient%4Connectivity.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SMBClient%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SMBClient%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SmbClient%4Security.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SmbClient%4Security.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SMBServer%4Audit.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SMBServer%4Audit.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SMBServer%4Connectivity.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SMBServer%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SMBServer%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-SMBServer%4Security.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-SMBServer%4Security.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Store%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Store%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TaskScheduler%4Maintenance.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-TWinUI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-TWinUI%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-User Profile Service%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-UserPnp%4ActionCenter.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-UserPnp%4DeviceInstall.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Wcmsvc%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Windows Defender%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Windows Defender%4WHC.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-Winlogon%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-Winlogon%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Microsoft-Windows-WMI-Activity%4Operational.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Security.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Security.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Setup.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Setup.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\System.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]System.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\Windows PowerShell.evtx | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Logs\[sysfrog@protonmail.com]Windows PowerShell.evtx.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\bin\[sysfrog@protonmail.com]javacpl.cpl.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\bin\server\[sysfrog@protonmail.com]classes.jsa.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\bin\server\[sysfrog@protonmail.com]Xusage.txt.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\COPYRIGHT | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]COPYRIGHT.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\accessibility.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]accessibility.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\amd64\[sysfrog@protonmail.com]jvm.cfg.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\calendars.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]calendars.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\charsets.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]charsets.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\classlist | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]classlist.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]CIEXYZ.pf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]GRAY.pf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]LINEAR_RGB.pf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]PYCC.pf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]sRGB.pf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\content-types.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]content-types.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\currency.data | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]currency.data.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]ffjcext.zip.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_de.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_es.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_fr.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_it.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ja.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ko.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_pt_BR.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_sv.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_CN.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_HK.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_TW.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash@2x.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11-lic.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11@2x-lic.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\deploy.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]deploy.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]access-bridge-64.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]cldrdata.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]dnsns.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]jaccess.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]jfxrt.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]localedata.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\meta-index | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]meta-index.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]nashorn.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunec.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunjce_provider.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunmscapi.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunpkcs11.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]zipfs.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\flavormap.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]flavormap.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]fontconfig.bfc.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]fontconfig.properties.src.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiBold.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiItalic.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightItalic.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightRegular.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansDemiBold.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansRegular.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterBold.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterRegular.ttf.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]hijrah-config-umalqura.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]cursors.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]invalid32x32.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_CopyDrop32x32.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_CopyNoDrop32x32.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_LinkDrop32x32.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_LinkNoDrop32x32.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_MoveDrop32x32.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_MoveNoDrop32x32.gif.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\javafx.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]javafx.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\javaws.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]javaws.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jce.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jce.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]default.jfc.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]profile.jfc.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jfr.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfr.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfxswt.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jsse.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jsse.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jvm.hprof.txt.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\logging.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]logging.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]jmxremote.access.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]jmxremote.password.template.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\management.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]management.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]snmp.acl.template.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\management-agent.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]management-agent.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\meta-index | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]meta-index.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\net.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]net.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\plugin.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]plugin.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]psfont.properties.ja.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]psfontj2d.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\resources.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]resources.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\rt.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]rt.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\blacklist | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]blacklist.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]blacklisted.certs.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\cacerts | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]cacerts.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\java.policy | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]java.policy.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\java.security | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]java.security.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]javaws.policy.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]local_policy.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\trusted.libraries | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]trusted.libraries.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]US_export_policy.jar.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\sound.properties | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]sound.properties.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\tzdb.dat | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzdb.dat.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\tzmappings | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzmappings.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\LICENSE | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]LICENSE.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\README.txt | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]README.txt.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\release | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]release.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]THIRDPARTYLICENSEREADME-JAVAFX.txt.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]THIRDPARTYLICENSEREADME.txt.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\Welcome.html | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]Welcome.html.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\AppXManifest.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\[sysfrog@protonmail.com]AppXManifest.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\FileSystemMetadata.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\[sysfrog@protonmail.com]FileSystemMetadata.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\OSPP.HTM | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPP.HTM.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\OSPP.VBS | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPP.VBS.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\OSPPREARM.EXE | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPPREARM.EXE.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\SLERROR.XML | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]SLERROR.XML.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.common.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifestLoc.en-us.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AuthoredExtensions.xml.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00004_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00011_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00021_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00037_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00038_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00040_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00052_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00057_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00090_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00092_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00103_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00120_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00126_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00129_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00130_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00135_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00139_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00142_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00154_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00157_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00158_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00160_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00161_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00163_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00164_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00165_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00167_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00169_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00170_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00171_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00172_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00174_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00175_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00176_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00010_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00010_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00015_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00015_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00790_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00790_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00853_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00853_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00914_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00914_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00932_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00932_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00965_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00965_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01039_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01039_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01044_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01060_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01060_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01084_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01084_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01173_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01173_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01174_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01174_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01184_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01184_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01216_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01216_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01218_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01218_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01251_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01251_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01545_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01545_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02122_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02122_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02559_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02559_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02724_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02724_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN03500_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN03500_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04108_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04108_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04117_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04117_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04134_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04134_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04174_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04174_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04191_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04191_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04195_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04195_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04196_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04196_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04206_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04206_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04225_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04225_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04235_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04235_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04267_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04267_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04269_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04269_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04323_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04323_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04326_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04326_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04332_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04332_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04355_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04355_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04369_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04369_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04384_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04384_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04385_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04385_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BABY_01.MID.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00116_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00116_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00141_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00141_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00146_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00146_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00155_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00155_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00160_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00160_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00173_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00173_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD05119_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD05119_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06102_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD06102_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06200_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD06200_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07761_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07761_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07804_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07804_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07831_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07831_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08758_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08758_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08773_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08773_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08808_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08808_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08868_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08868_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09031_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09194_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09194_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09662_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09662_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09664_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09664_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD10890_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD10972_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19563_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19582_.GIF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19695_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19695_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19827_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19827_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19828_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19828_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19986_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19986_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19988_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19988_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD20013_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD20013_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00008_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00008_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00012_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00012_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00045_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00045_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00098_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00098_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00105_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00105_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00122_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00122_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00130_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00130_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00148_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00148_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00152_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00152_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00194_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00194_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00195_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00195_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00234_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00234_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00242_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00242_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00247_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00247_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00248_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00252_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00254_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00261_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00262_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00265_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00267_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00269_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00270_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00273_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00274_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00296_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00390_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00392_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00524_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00525_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00526_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00648_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00921_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00923_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00932_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00985_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BOAT.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BOATINST.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00076_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00078_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00092_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00100_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00135_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00136_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00145_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00174_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00184_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00186_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00200_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00224_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00438_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00439_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00440_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF | desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Create | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00441_.WMF.sysfrog | desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\bin\[sysfrog@protonmail.com]javacpl.cpl.sysfrog | size = 4096 |
|
45 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\bin\[sysfrog@protonmail.com]javacpl.cpl.sysfrog | size = 3088 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\bin\server\[sysfrog@protonmail.com]classes.jsa.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\bin\server\[sysfrog@protonmail.com]Xusage.txt.sysfrog | size = 1424 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]COPYRIGHT.sysfrog | size = 3248 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]accessibility.properties.sysfrog | size = 160 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\amd64\[sysfrog@protonmail.com]jvm.cfg.sysfrog | size = 640 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]calendars.properties.sysfrog | size = 1392 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]charsets.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]classlist.sysfrog | size = 4096 |
|
20 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]classlist.sysfrog | size = 2448 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]CIEXYZ.pf.sysfrog | size = 4096 |
|
12 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]CIEXYZ.pf.sysfrog | size = 2096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]GRAY.pf.sysfrog | size = 640 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]LINEAR_RGB.pf.sysfrog | size = 1056 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]PYCC.pf.sysfrog | size = 4096 |
|
67 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]PYCC.pf.sysfrog | size = 48 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\cmm\[sysfrog@protonmail.com]sRGB.pf.sysfrog | size = 3152 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]content-types.properties.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]content-types.properties.sysfrog | size = 1456 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]currency.data.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]currency.data.sysfrog | size = 32 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]ffjcext.zip.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]ffjcext.zip.sysfrog | size = 1872 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages.properties.sysfrog | size = 2864 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_de.properties.sysfrog | size = 3312 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_es.properties.sysfrog | size = 3616 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_fr.properties.sysfrog | size = 3424 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_it.properties.sysfrog | size = 3232 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ja.properties.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ja.properties.sysfrog | size = 2256 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ko.properties.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_ko.properties.sysfrog | size = 1632 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_pt_BR.properties.sysfrog | size = 3296 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_sv.properties.sysfrog | size = 3424 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_CN.properties.sysfrog | size = 4080 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_HK.properties.sysfrog | size = 3760 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]messages_zh_TW.properties.sysfrog | size = 3760 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash.gif.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash.gif.sysfrog | size = 400 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash@2x.gif.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash@2x.gif.sysfrog | size = 2992 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11-lic.gif.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11-lic.gif.sysfrog | size = 3712 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11@2x-lic.gif.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\deploy\[sysfrog@protonmail.com]splash_11@2x-lic.gif.sysfrog | size = 4064 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]deploy.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]access-bridge-64.jar.sysfrog | size = 4096 |
|
45 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]access-bridge-64.jar.sysfrog | size = 3712 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]cldrdata.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]dnsns.jar.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]dnsns.jar.sysfrog | size = 96 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]jaccess.jar.sysfrog | size = 4096 |
|
10 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]jaccess.jar.sysfrog | size = 3568 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]jfxrt.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]localedata.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]meta-index.sysfrog | size = 1472 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]nashorn.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunec.jar.sysfrog | size = 4096 |
|
10 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunec.jar.sysfrog | size = 1232 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunjce_provider.jar.sysfrog | size = 4096 |
|
68 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunjce_provider.jar.sysfrog | size = 1648 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunmscapi.jar.sysfrog | size = 4096 |
|
7 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunmscapi.jar.sysfrog | size = 4032 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunpkcs11.jar.sysfrog | size = 4096 |
|
61 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]sunpkcs11.jar.sysfrog | size = 1472 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]zipfs.jar.sysfrog | size = 4096 |
|
16 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\ext\[sysfrog@protonmail.com]zipfs.jar.sysfrog | size = 3392 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]flavormap.properties.sysfrog | size = 3936 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]fontconfig.bfc.sysfrog | size = 3776 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]fontconfig.properties.src.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]fontconfig.properties.src.sysfrog | size = 2384 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiBold.ttf.sysfrog | size = 4096 |
|
18 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiBold.ttf.sysfrog | size = 1424 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiItalic.ttf.sysfrog | size = 4096 |
|
18 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightDemiItalic.ttf.sysfrog | size = 1408 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightItalic.ttf.sysfrog | size = 4096 |
|
19 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightItalic.ttf.sysfrog | size = 3040 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightRegular.ttf.sysfrog | size = 4096 |
|
84 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaBrightRegular.ttf.sysfrog | size = 848 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansDemiBold.ttf.sysfrog | size = 4096 |
|
77 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansDemiBold.ttf.sysfrog | size = 2512 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansRegular.ttf.sysfrog | size = 4096 |
|
170 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaSansRegular.ttf.sysfrog | size = 1920 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterBold.ttf.sysfrog | size = 4096 |
|
57 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterBold.ttf.sysfrog | size = 608 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterRegular.ttf.sysfrog | size = 4096 |
|
59 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\fonts\[sysfrog@protonmail.com]LucidaTypewriterRegular.ttf.sysfrog | size = 1040 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]hijrah-config-umalqura.properties.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]hijrah-config-umalqura.properties.sysfrog | size = 1680 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]cursors.properties.sysfrog | size = 1296 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]invalid32x32.gif.sysfrog | size = 160 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_CopyDrop32x32.gif.sysfrog | size = 176 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_CopyNoDrop32x32.gif.sysfrog | size = 160 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_LinkDrop32x32.gif.sysfrog | size = 176 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_LinkNoDrop32x32.gif.sysfrog | size = 160 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_MoveDrop32x32.gif.sysfrog | size = 160 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\images\cursors\[sysfrog@protonmail.com]win32_MoveNoDrop32x32.gif.sysfrog | size = 160 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]javafx.properties.sysfrog | size = 64 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]javaws.jar.sysfrog | size = 4096 |
|
230 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]javaws.jar.sysfrog | size = 2096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jce.jar.sysfrog | size = 4096 |
|
28 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jce.jar.sysfrog | size = 1760 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]default.jfc.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]default.jfc.sysfrog | size = 3728 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]profile.jfc.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\jfr\[sysfrog@protonmail.com]profile.jfc.sysfrog | size = 3696 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfr.jar.sysfrog | size = 4096 |
|
136 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfr.jar.sysfrog | size = 3536 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfxswt.jar.sysfrog | size = 4096 |
|
8 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jfxswt.jar.sysfrog | size = 1168 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jsse.jar.sysfrog | size = 4096 |
|
142 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jsse.jar.sysfrog | size = 2960 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jvm.hprof.txt.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]jvm.hprof.txt.sysfrog | size = 144 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]logging.properties.sysfrog | size = 2464 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]jmxremote.access.sysfrog | size = 4000 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]jmxremote.password.template.sysfrog | size = 2864 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]management.properties.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]management.properties.sysfrog | size = 2352 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\management\[sysfrog@protonmail.com]snmp.acl.template.sysfrog | size = 3392 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]management-agent.jar.sysfrog | size = 384 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]meta-index.sysfrog | size = 2128 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]net.properties.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]net.properties.sysfrog | size = 384 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]plugin.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]psfont.properties.ja.sysfrog | size = 2800 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]psfontj2d.properties.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]psfontj2d.properties.sysfrog | size = 2208 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]resources.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]rt.jar.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]blacklist.sysfrog | size = 4064 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]blacklisted.certs.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]cacerts.sysfrog | size = 4096 |
|
28 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]cacerts.sysfrog | size = 240 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]java.policy.sysfrog | size = 2480 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]java.security.sysfrog | size = 4096 |
|
8 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]java.security.sysfrog | size = 3760 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]javaws.policy.sysfrog | size = 112 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]local_policy.jar.sysfrog | size = 3536 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]trusted.libraries.sysfrog | size = 16 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]US_export_policy.jar.sysfrog | size = 3040 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]sound.properties.sysfrog | size = 1216 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzdb.dat.sysfrog | size = 4096 |
|
25 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzdb.dat.sysfrog | size = 3104 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzmappings.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzmappings.sysfrog | size = 224 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]LICENSE.sysfrog | size = 48 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]README.txt.sysfrog | size = 48 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]release.sysfrog | size = 544 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]THIRDPARTYLICENSEREADME-JAVAFX.txt.sysfrog | size = 4096 |
|
15 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]THIRDPARTYLICENSEREADME-JAVAFX.txt.sysfrog | size = 2496 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]THIRDPARTYLICENSEREADME.txt.sysfrog | size = 4096 |
|
35 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]THIRDPARTYLICENSEREADME.txt.sysfrog | size = 1824 |
|
1 | |
| Write | C:\\Program Files\Java\jre1.8.0_144\[sysfrog@protonmail.com]Welcome.html.sysfrog | size = 960 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\[sysfrog@protonmail.com]AppXManifest.xml.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Microsoft Office\[sysfrog@protonmail.com]FileSystemMetadata.xml.sysfrog | size = 288 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPP.HTM.sysfrog | size = 4096 |
|
42 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPP.HTM.sysfrog | size = 2512 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPP.VBS.sysfrog | size = 4096 |
|
23 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPP.VBS.sysfrog | size = 272 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPPREARM.EXE.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]OSPPREARM.EXE.sysfrog | size = 2640 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]SLERROR.XML.sysfrog | size = 4096 |
|
8 | |
| Write | C:\\Program Files\Microsoft Office\Office16\[sysfrog@protonmail.com]SLERROR.XML.sysfrog | size = 3584 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
94 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.sysfrog | size = 2336 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.sysfrog | size = 1536 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
195 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.sysfrog | size = 2160 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
121 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.sysfrog | size = 912 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
61 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.sysfrog | size = 3872 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.sysfrog | size = 3072 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
186 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.sysfrog | size = 1520 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.sysfrog | size = 2160 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.sysfrog | size = 2160 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
52 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.sysfrog | size = 2896 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
83 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.sysfrog | size = 3376 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.sysfrog | size = 2640 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
87 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.sysfrog | size = 1008 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
15 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.sysfrog | size = 3568 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.sysfrog | size = 1040 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
97 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.sysfrog | size = 2224 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.sysfrog | size = 1456 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.sysfrog | size = 3760 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.sysfrog | size = 4096 |
|
128 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.sysfrog | size = 3680 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.sysfrog | size = 1264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.sysfrog | size = 3376 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifest.common.xml.sysfrog | size = 4096 |
|
248 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifestLoc.en-us.xml.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AppXManifestLoc.en-us.xml.sysfrog | size = 1648 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\PackageManifests\[sysfrog@protonmail.com]AuthoredExtensions.xml.sysfrog | size = 384 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00004_.GIF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00004_.GIF.sysfrog | size = 848 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00011_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00011_.GIF.sysfrog | size = 3136 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00021_.GIF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00021_.GIF.sysfrog | size = 2592 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00037_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00037_.GIF.sysfrog | size = 2592 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00038_.GIF.sysfrog | size = 3264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00040_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00040_.GIF.sysfrog | size = 4016 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00052_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00052_.GIF.sysfrog | size = 3600 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00057_.GIF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00057_.GIF.sysfrog | size = 3712 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00090_.GIF.sysfrog | size = 528 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00092_.GIF.sysfrog | size = 512 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00103_.GIF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00103_.GIF.sysfrog | size = 416 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00120_.GIF.sysfrog | size = 3488 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00126_.GIF.sysfrog | size = 3152 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00129_.GIF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00129_.GIF.sysfrog | size = 208 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00130_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00130_.GIF.sysfrog | size = 1168 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00135_.GIF.sysfrog | size = 2608 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00139_.GIF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00139_.GIF.sysfrog | size = 2416 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00142_.GIF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00142_.GIF.sysfrog | size = 3024 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00154_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00154_.GIF.sysfrog | size = 1232 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00157_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00157_.GIF.sysfrog | size = 864 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00158_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00158_.GIF.sysfrog | size = 944 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00160_.GIF.sysfrog | size = 1152 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00161_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00161_.GIF.sysfrog | size = 3488 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00163_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00163_.GIF.sysfrog | size = 2896 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00164_.GIF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00164_.GIF.sysfrog | size = 976 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00165_.GIF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00165_.GIF.sysfrog | size = 400 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00167_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00167_.GIF.sysfrog | size = 800 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00169_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00169_.GIF.sysfrog | size = 1280 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00170_.GIF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00170_.GIF.sysfrog | size = 1072 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00171_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00171_.GIF.sysfrog | size = 928 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00172_.GIF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00172_.GIF.sysfrog | size = 304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00174_.GIF.sysfrog | size = 3968 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00175_.GIF.sysfrog | size = 3392 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AG00176_.GIF.sysfrog | size = 3136 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00010_.WMF.sysfrog | size = 3040 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00015_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00015_.WMF.sysfrog | size = 640 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00790_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00790_.WMF.sysfrog | size = 1600 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00853_.WMF.sysfrog | size = 4096 |
|
5 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00853_.WMF.sysfrog | size = 112 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00914_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00914_.WMF.sysfrog | size = 2656 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00932_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00932_.WMF.sysfrog | size = 2144 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00965_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN00965_.WMF.sysfrog | size = 2992 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01039_.WMF.sysfrog | size = 3360 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01044_.WMF.sysfrog | size = 1600 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01060_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01060_.WMF.sysfrog | size = 3888 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01084_.WMF.sysfrog | size = 1840 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01173_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01173_.WMF.sysfrog | size = 1760 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01174_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01174_.WMF.sysfrog | size = 3296 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01184_.WMF.sysfrog | size = 3760 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01216_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01216_.WMF.sysfrog | size = 1744 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01218_.WMF.sysfrog | size = 3024 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01251_.WMF.sysfrog | size = 2768 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01545_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN01545_.WMF.sysfrog | size = 3280 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02122_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02122_.WMF.sysfrog | size = 3456 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02559_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02559_.WMF.sysfrog | size = 2544 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN02724_.WMF.sysfrog | size = 2112 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN03500_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN03500_.WMF.sysfrog | size = 1056 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04108_.WMF.sysfrog | size = 2352 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04117_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04117_.WMF.sysfrog | size = 1968 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04134_.WMF.sysfrog | size = 3424 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04174_.WMF.sysfrog | size = 2640 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04191_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04191_.WMF.sysfrog | size = 2544 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04195_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04195_.WMF.sysfrog | size = 528 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04196_.WMF.sysfrog | size = 3152 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04206_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04206_.WMF.sysfrog | size = 3584 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04225_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04225_.WMF.sysfrog | size = 304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04235_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04235_.WMF.sysfrog | size = 3712 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04267_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04267_.WMF.sysfrog | size = 3712 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04269_.WMF.sysfrog | size = 2032 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04323_.WMF.sysfrog | size = 2496 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04326_.WMF.sysfrog | size = 3360 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04332_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04332_.WMF.sysfrog | size = 208 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04355_.WMF.sysfrog | size = 3232 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04369_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04369_.WMF.sysfrog | size = 720 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04384_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04384_.WMF.sysfrog | size = 912 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04385_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]AN04385_.WMF.sysfrog | size = 912 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BABY_01.MID.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BABY_01.MID.sysfrog | size = 3296 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00116_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00116_.WMF.sysfrog | size = 784 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00141_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00141_.WMF.sysfrog | size = 2320 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00146_.WMF.sysfrog | size = 4096 |
|
7 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00146_.WMF.sysfrog | size = 288 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00155_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00155_.WMF.sysfrog | size = 3456 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00160_.WMF.sysfrog | size = 4096 |
|
5 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00160_.WMF.sysfrog | size = 2048 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00173_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD00173_.WMF.sysfrog | size = 3904 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD05119_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD05119_.WMF.sysfrog | size = 864 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD06102_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD06102_.WMF.sysfrog | size = 3840 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD06200_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD06200_.WMF.sysfrog | size = 304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07761_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07761_.WMF.sysfrog | size = 2176 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07804_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07804_.WMF.sysfrog | size = 832 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD07831_.WMF.sysfrog | size = 4080 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08758_.WMF.sysfrog | size = 4096 |
|
5 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08758_.WMF.sysfrog | size = 3856 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08773_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08773_.WMF.sysfrog | size = 208 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08808_.WMF.sysfrog | size = 4096 |
|
11 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08808_.WMF.sysfrog | size = 2944 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08868_.WMF.sysfrog | size = 4096 |
|
9 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD08868_.WMF.sysfrog | size = 3344 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09031_.WMF.sysfrog | size = 4096 |
|
11 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09031_.WMF.sysfrog | size = 2736 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09194_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09194_.WMF.sysfrog | size = 2256 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09662_.WMF.sysfrog | size = 4096 |
|
5 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09662_.WMF.sysfrog | size = 80 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09664_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD09664_.WMF.sysfrog | size = 3872 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD10890_.GIF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD10890_.GIF.sysfrog | size = 1232 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD10972_.GIF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD10972_.GIF.sysfrog | size = 3808 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19563_.GIF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19563_.GIF.sysfrog | size = 4080 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19582_.GIF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19582_.GIF.sysfrog | size = 3456 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19695_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19695_.WMF.sysfrog | size = 704 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19827_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19827_.WMF.sysfrog | size = 1520 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19828_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19828_.WMF.sysfrog | size = 592 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19986_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19986_.WMF.sysfrog | size = 2208 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19988_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD19988_.WMF.sysfrog | size = 1936 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD20013_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BD20013_.WMF.sysfrog | size = 2880 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00008_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00008_.WMF.sysfrog | size = 240 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00012_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00012_.WMF.sysfrog | size = 1632 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00045_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00045_.WMF.sysfrog | size = 3776 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00098_.WMF.sysfrog | size = 1024 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00105_.WMF.sysfrog | size = 896 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00122_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00122_.WMF.sysfrog | size = 1968 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00130_.WMF.sysfrog | size = 1472 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00148_.WMF.sysfrog | size = 1712 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00152_.WMF.sysfrog | size = 1520 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00194_.WMF.sysfrog | size = 4000 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00195_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00195_.WMF.sysfrog | size = 3984 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00234_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00234_.WMF.sysfrog | size = 1120 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00242_.WMF.sysfrog | size = 4032 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00247_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00247_.WMF.sysfrog | size = 2160 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00248_.WMF.sysfrog | size = 1552 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00252_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00252_.WMF.sysfrog | size = 624 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00254_.WMF.sysfrog | size = 1744 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00261_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00261_.WMF.sysfrog | size = 208 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00262_.WMF.sysfrog | size = 2560 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00265_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00265_.WMF.sysfrog | size = 1664 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00267_.WMF.sysfrog | size = 2656 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00269_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00269_.WMF.sysfrog | size = 1184 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00270_.WMF.sysfrog | size = 3024 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00273_.WMF.sysfrog | size = 3792 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00274_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00274_.WMF.sysfrog | size = 80 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00296_.WMF.sysfrog | size = 816 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00390_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00390_.WMF.sysfrog | size = 816 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00392_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00392_.WMF.sysfrog | size = 2480 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00524_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00524_.WMF.sysfrog | size = 2912 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00525_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00525_.WMF.sysfrog | size = 1408 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00526_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00526_.WMF.sysfrog | size = 2992 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00648_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00648_.WMF.sysfrog | size = 3312 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00921_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00921_.WMF.sysfrog | size = 320 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00923_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00923_.WMF.sysfrog | size = 2176 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00932_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00932_.WMF.sysfrog | size = 3104 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BL00985_.WMF.sysfrog | size = 3776 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BOAT.WMF.sysfrog | size = 3360 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BOATINST.WMF.sysfrog | size = 4096 |
|
7 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BOATINST.WMF.sysfrog | size = 336 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00076_.WMF.sysfrog | size = 1344 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00078_.WMF.sysfrog | size = 1456 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00092_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00092_.WMF.sysfrog | size = 3888 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00100_.WMF.sysfrog | size = 2384 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00135_.WMF.sysfrog | size = 1056 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00136_.WMF.sysfrog | size = 2176 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00145_.WMF.sysfrog | size = 1728 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00174_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00174_.WMF.sysfrog | size = 176 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00184_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00184_.WMF.sysfrog | size = 896 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00186_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00186_.WMF.sysfrog | size = 512 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00200_.WMF.sysfrog | size = 3120 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00224_.WMF.sysfrog | size = 1600 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00438_.WMF.sysfrog | size = 1216 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00439_.WMF.sysfrog | size = 2064 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00440_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00440_.WMF.sysfrog | size = 1488 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00441_.WMF.sysfrog | size = 3536 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00442_.WMF.sysfrog | size = 2496 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00443_.WMF.sysfrog | size = 1680 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00444_.WMF.sysfrog | size = 3904 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00445_.WMF.sysfrog | size = 3808 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS00453_.WMF.sysfrog | size = 2448 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01080_.WMF.sysfrog | size = 2736 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01603_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01603_.WMF.sysfrog | size = 3088 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01634_.WMF.sysfrog | size = 3504 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01635_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01635_.WMF.sysfrog | size = 2720 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01636_.WMF.sysfrog | size = 1888 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01637_.WMF.sysfrog | size = 3952 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01638_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01638_.WMF.sysfrog | size = 2352 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01639_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]BS01639_.WMF.sysfrog | size = 144 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CARBN_01.MID.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CARBN_01.MID.sysfrog | size = 1136 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CG1606.WMF.sysfrog | size = 3568 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CLASSIC1.WMF.sysfrog | size = 2432 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CLASSIC2.WMF.sysfrog | size = 2272 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CLIP.WMF.sysfrog | size = 2272 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CMNTY_01.MID.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CMNTY_01.MID.sysfrog | size = 2880 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CRANE.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CRANE.WMF.sysfrog | size = 1184 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CRANINST.WMF.sysfrog | size = 4096 |
|
12 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CRANINST.WMF.sysfrog | size = 400 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CUP.WMF.sysfrog | size = 2976 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CUPINST.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]CUPINST.WMF.sysfrog | size = 2144 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00117_.WMF.sysfrog | size = 4096 |
|
7 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00117_.WMF.sysfrog | size = 2464 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00121_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00121_.WMF.sysfrog | size = 80 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00234_.WMF.sysfrog | size = 4096 |
|
7 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00234_.WMF.sysfrog | size = 960 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00255_.WMF.sysfrog | size = 2704 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00256_.WMF.sysfrog | size = 2848 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00261_.WMF.sysfrog | size = 4096 |
|
9 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00261_.WMF.sysfrog | size = 1120 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00297_.WMF.sysfrog | size = 4096 |
|
9 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00297_.WMF.sysfrog | size = 3168 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00372_.WMF.sysfrog | size = 800 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00405_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00405_.WMF.sysfrog | size = 1216 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00407_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00407_.WMF.sysfrog | size = 3744 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00413_.WMF.sysfrog | size = 4096 |
|
10 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00413_.WMF.sysfrog | size = 2048 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00414_.WMF.sysfrog | size = 4096 |
|
10 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00414_.WMF.sysfrog | size = 1952 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00419_.WMF.sysfrog | size = 720 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00437_.WMF.sysfrog | size = 1936 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00448_.WMF.sysfrog | size = 2960 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00449_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00449_.WMF.sysfrog | size = 1808 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00687_.WMF.sysfrog | size = 4096 |
|
5 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00687_.WMF.sysfrog | size = 320 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00705_.WMF.sysfrog | size = 4096 |
|
6 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD00705_.WMF.sysfrog | size = 16 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01015_.WMF.sysfrog | size = 2240 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01039_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01039_.WMF.sysfrog | size = 2544 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01138_.WMF.sysfrog | size = 3696 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01139_.WMF.sysfrog | size = 3648 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01140_.WMF.sysfrog | size = 3632 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01143_.WMF.sysfrog | size = 2144 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01145_.WMF.sysfrog | size = 2784 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01146_.WMF.sysfrog | size = 2800 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01151_.WMF.sysfrog | size = 2976 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01152_.WMF.sysfrog | size = 2976 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01157_.WMF.sysfrog | size = 3600 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01160_.WMF.sysfrog | size = 2240 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01162_.WMF.sysfrog | size = 2304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01163_.WMF.sysfrog | size = 2304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01166_.WMF.sysfrog | size = 2096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01167_.WMF.sysfrog | size = 2096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01168_.WMF.sysfrog | size = 2016 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01169_.WMF.sysfrog | size = 2032 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01170_.WMF.sysfrog | size = 2416 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01171_.WMF.sysfrog | size = 2064 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01172_.WMF.sysfrog | size = 2240 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01173_.WMF.sysfrog | size = 1808 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01176_.WMF.sysfrog | size = 1904 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01178_.WMF.sysfrog | size = 3808 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01179_.WMF.sysfrog | size = 2032 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01180_.WMF.sysfrog | size = 2096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01181_.WMF.sysfrog | size = 1456 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01182_.WMF.sysfrog | size = 3008 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01183_.WMF.sysfrog | size = 2304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01186_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01186_.WMF.sysfrog | size = 384 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01366_.WMF.sysfrog | size = 1776 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01434_.WMF.sysfrog | size = 912 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01585_.WMF.sysfrog | size = 2528 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01586_.WMF.sysfrog | size = 2336 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01628_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01628_.WMF.sysfrog | size = 2688 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01629_.WMF.sysfrog | size = 592 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01630_.WMF.sysfrog | size = 304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01631_.WMF.sysfrog | size = 560 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01761_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01761_.WMF.sysfrog | size = 64 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01772_.WMF.sysfrog | size = 2304 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]DD01793_.WMF.sysfrog | size = 3264 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EAST_01.MID.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EAST_01.MID.sysfrog | size = 2080 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]ED00010_.WMF.sysfrog | size = 1392 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]ED00019_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]ED00019_.WMF.sysfrog | size = 768 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]ED00172_.WMF.sysfrog | size = 2704 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]ED00184_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]ED00184_.WMF.sysfrog | size = 2864 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00006_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00006_.WMF.sysfrog | size = 1664 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00202_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00202_.WMF.sysfrog | size = 2848 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00222_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00222_.WMF.sysfrog | size = 80 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00242_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00242_.WMF.sysfrog | size = 2688 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00319_.WMF.sysfrog | size = 2288 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00320_.WMF.sysfrog | size = 752 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00397_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00397_.WMF.sysfrog | size = 928 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00902_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EN00902_.WMF.sysfrog | size = 3856 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EXPLR_01.MID.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]EXPLR_01.MID.sysfrog | size = 2384 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FALL_01.MID.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FALL_01.MID.sysfrog | size = 752 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00074_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00074_.WMF.sysfrog | size = 1472 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00076_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00076_.WMF.sysfrog | size = 3808 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00077_.WMF.sysfrog | size = 4096 |
|
7 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00077_.WMF.sysfrog | size = 1584 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00086_.WMF.sysfrog | size = 4096 |
|
7 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00086_.WMF.sysfrog | size = 544 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00090_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00090_.WMF.sysfrog | size = 1920 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00096_.WMF.sysfrog | size = 4096 |
|
9 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00096_.WMF.sysfrog | size = 528 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00296_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00296_.WMF.sysfrog | size = 3584 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00297_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00297_.WMF.sysfrog | size = 1824 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00306_.WMF.sysfrog | size = 4096 |
|
11 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00306_.WMF.sysfrog | size = 1760 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00336_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00336_.WMF.sysfrog | size = 1984 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00361_.WMF.sysfrog | size = 4080 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00369_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00369_.WMF.sysfrog | size = 368 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00382_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00382_.WMF.sysfrog | size = 240 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00397_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00397_.WMF.sysfrog | size = 2640 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00403_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00403_.WMF.sysfrog | size = 3792 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00414_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00414_.WMF.sysfrog | size = 2816 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00419_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00419_.WMF.sysfrog | size = 16 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00428_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00428_.WMF.sysfrog | size = 704 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00435_.WMF.sysfrog | size = 2112 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00438_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00438_.WMF.sysfrog | size = 1008 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00455_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00455_.WMF.sysfrog | size = 736 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00459_.WMF.sysfrog | size = 4096 |
|
4 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00459_.WMF.sysfrog | size = 1024 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00543_.WMF.sysfrog | size = 1488 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00544_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00544_.WMF.sysfrog | size = 1168 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00564_.WMF.sysfrog | size = 912 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00586_.WMF.sysfrog | size = 768 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00775_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00775_.WMF.sysfrog | size = 2976 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00779_.WMF.sysfrog | size = 4096 |
|
2 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00779_.WMF.sysfrog | size = 832 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00799_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00799_.WMF.sysfrog | size = 1696 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00814_.WMF.sysfrog | size = 4096 |
|
10 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00814_.WMF.sysfrog | size = 1760 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00965_.WMF.sysfrog | size = 4096 |
|
3 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD00965_.WMF.sysfrog | size = 2880 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD01074_.WMF.sysfrog | size = 4096 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD01074_.WMF.sysfrog | size = 544 |
|
1 | |
| Write | C:\\Program Files\Microsoft Office\root\CLIPART\PUB60COR\[sysfrog@protonmail.com]FD01084_.WMF.sysfrog | size = 2416 |
|
1 | |
| Delete | C:\\588bce7c90097ed212\1053\eula.rtf | - |
|
1 | |
|
For performance reasons, the remaining 4003 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Process (4)
| Operation | Process | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | C:\WINDOWS\system32\cmd.exe | os_pid = 0xd44, show_window = SW_HIDE |
|
1 | |
| Create | C:\WINDOWS\system32\cmd.exe | os_pid = 0xd04, show_window = SW_HIDE |
|
1 | |
| Create | C:\WINDOWS\system32\cmd.exe | os_pid = 0xedc, show_window = SW_HIDE |
|
1 | |
| Create | C:\WINDOWS\system32\cmd.exe | os_pid = 0x2ac, show_window = SW_HIDE |
|
1 |
Module (413)
| Operation | Module | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Load | api-ms-win-core-synch-l1-2-0 | base_address = 0x74ea0000 |
|
2 | |
| Load | api-ms-win-core-fibers-l1-1-1 | base_address = 0x74ea0000 |
|
2 | |
| Load | api-ms-win-core-localization-l1-2-1 | base_address = 0x74ea0000 |
|
1 | |
| Load | kernel32 | base_address = 0x75e90000 |
|
1 | |
| Load | api-ms-win-core-sysinfo-l1-2-1 | base_address = 0x74ea0000 |
|
1 | |
| Get Handle | c:\users\fd1hvy\desktop\sxidlt.exe | base_address = 0x400000 |
|
1 | |
| Get Handle | c:\windows\syswow64\kernel32.dll | base_address = 0x75e90000 |
|
113 | |
| Get Handle | c:\windows\syswow64\user32.dll | base_address = 0x74b70000 |
|
5 | |
| Get Handle | c:\windows\syswow64\advapi32.dll | base_address = 0x761b0000 |
|
15 | |
| Get Handle | c:\windows\syswow64\shell32.dll | base_address = 0x76480000 |
|
1 | |
| Get Handle | c:\windows\syswow64\ws2_32.dll | base_address = 0x746a0000 |
|
27 | |
| Get Handle | c:\windows\syswow64\wldap32.dll | base_address = 0x74d40000 |
|
16 | |
| Get Filename | c:\users\fd1hvy\desktop\sxidlt.exe | process_name = c:\users\fd1hvy\desktop\sxidlt.exe, file_name_orig = C:\Users\FD1HVy\Desktop\sxidlt.exe, size = 512 |
|
1 | |
| Get Filename | - | process_name = c:\users\fd1hvy\desktop\sxidlt.exe, file_name_orig = C:\Users\FD1HVy\Desktop\sxidlt.exe, size = 260 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = LeaveCriticalSection, address_out = 0x77bfb250 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = DeleteCriticalSection, address_out = 0x77bdfb90 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = Sleep, address_out = 0x75ea6760 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SleepEx, address_out = 0x75efec70 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FormatMessageA, address_out = 0x75ea4bc0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WaitForSingleObject, address_out = 0x75efeca0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WaitForMultipleObjects, address_out = 0x75efec80 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = ReadFile, address_out = 0x75eff090 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = PeekNamedPipe, address_out = 0x75ea74d0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = ExpandEnvironmentStringsA, address_out = 0x75ea4a20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = EnterCriticalSection, address_out = 0x77bfb2d0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetSystemDirectoryA, address_out = 0x75ea5400 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = VerifyVersionInfoA, address_out = 0x75ee2710 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetEndOfFile, address_out = 0x75eff0e0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetEnvironmentVariableA, address_out = 0x75ea64c0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FreeEnvironmentStringsW, address_out = 0x75ea4c20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetEnvironmentStringsW, address_out = 0x75ea4eb0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCPInfo, address_out = 0x75ea4d10 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetOEMCP, address_out = 0x75ea5160 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = IsValidCodePage, address_out = 0x75ea59c0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = InitializeCriticalSection, address_out = 0x77c0af20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetLastError, address_out = 0x75ea4f00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FlushConsoleInputBuffer, address_out = 0x75eff560 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = LoadLibraryA, address_out = 0x75ea5a80 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FreeLibrary, address_out = 0x75ea4c40 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GlobalMemoryStatus, address_out = 0x75ee47f0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetTickCount, address_out = 0x75efdd50 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCurrentProcessId, address_out = 0x75efea20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = QueryPerformanceCounter, address_out = 0x75ea5da0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CloseHandle, address_out = 0x75efeab0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = MultiByteToWideChar, address_out = 0x75ea5c40 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetProcAddress, address_out = 0x75ea51b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCurrentThreadId, address_out = 0x75ea8820 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetLastError, address_out = 0x75ea5010 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WriteFile, address_out = 0x75eff180 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetFileType, address_out = 0x75efef60 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetStdHandle, address_out = 0x75ea5330 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetModuleHandleA, address_out = 0x75ea50b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = Wow64EnableWow64FsRedirection, address_out = 0x75ee6eb0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetDriveTypeA, address_out = 0x75efeec0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = VerSetConditionMask, address_out = 0x77c148b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetModuleFileNameA, address_out = 0x75ea5070 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FindNextFileA, address_out = 0x75efee20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FindFirstFileExA, address_out = 0x75efedc0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetProcessHeap, address_out = 0x75ea51f0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = HeapQueryInformation, address_out = 0x75ea5830 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = HeapSize, address_out = 0x77c0a790 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = HeapReAlloc, address_out = 0x77bef630 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = HeapFree, address_out = 0x75ea57f0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetFullPathNameW, address_out = 0x75efefa0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCurrentDirectoryW, address_out = 0x75ea4e80 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetTimeZoneInformation, address_out = 0x75ea5650 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FlushFileBuffers, address_out = 0x75efee70 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetStringTypeW, address_out = 0x75ea53b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WaitForSingleObjectEx, address_out = 0x75efecb0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WriteConsoleW, address_out = 0x75eff500 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = OutputDebugStringW, address_out = 0x75ea5d10 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = OutputDebugStringA, address_out = 0x75ea5d00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetFileAttributesExW, address_out = 0x75efef00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateProcessA, address_out = 0x75ea45b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetExitCodeProcess, address_out = 0x75ea3c60 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = DeleteFileW, address_out = 0x75efed40 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetStdHandle, address_out = 0x75ea6620 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = LCMapStringW, address_out = 0x75ea5a60 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CompareStringW, address_out = 0x75ea4430 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetConsoleCP, address_out = 0x75eff440 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = ReadConsoleW, address_out = 0x75eff4c0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetACP, address_out = 0x75ea4ca0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCommandLineW, address_out = 0x75ea4cc0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = DecodePointer, address_out = 0x77c11ec0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCommandLineA, address_out = 0x75ea4cb0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WideCharToMultiByte, address_out = 0x75ea6b10 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetSystemInfo, address_out = 0x75ea54d0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = HeapValidate, address_out = 0x75ea58b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = HeapAlloc, address_out = 0x77bf2dc0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetDriveTypeW, address_out = 0x75efeed0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateFileW, address_out = 0x75efed10 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetFilePointerEx, address_out = 0x75eff130 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FreeLibraryAndExitThread, address_out = 0x75ea4c60 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = InitializeCriticalSectionAndSpinCount, address_out = 0x75efebb0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = TlsAlloc, address_out = 0x75ea6820 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = TlsGetValue, address_out = 0x75ea6850 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = TlsSetValue, address_out = 0x75ea6870 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = TlsFree, address_out = 0x75ea6830 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetSystemTimeAsFileTime, address_out = 0x75ea5530 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetModuleHandleW, address_out = 0x75ea50d0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = UnhandledExceptionFilter, address_out = 0x75ea68d0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetUnhandledExceptionFilter, address_out = 0x75ea6720 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCurrentProcess, address_out = 0x75efea10 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = TerminateProcess, address_out = 0x75ea67e0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = IsProcessorFeaturePresent, address_out = 0x75ea5960 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = InitializeSListHead, address_out = 0x77c16680 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = IsDebuggerPresent, address_out = 0x75ea5930 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetStartupInfoW, address_out = 0x75ea5320 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = EncodePointer, address_out = 0x77c129e0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = RaiseException, address_out = 0x75ea5e20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = RtlUnwind, address_out = 0x75ea7c10 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = LoadLibraryExW, address_out = 0x75ea5ac0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = ExitProcess, address_out = 0x75ea3cb0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetModuleHandleExW, address_out = 0x75ea5110 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FindClose, address_out = 0x75efed70 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FindFirstFileExW, address_out = 0x75efedd0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FindNextFileW, address_out = 0x75efee40 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SystemTimeToTzSpecificLocalTime, address_out = 0x75ea67c0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FileTimeToSystemTime, address_out = 0x75eff1f0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetModuleFileNameW, address_out = 0x75ea5090 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetConsoleCtrlHandler, address_out = 0x75eff4d0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetConsoleMode, address_out = 0x75eff450 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = ReadConsoleInputA, address_out = 0x75eff4a0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetConsoleMode, address_out = 0x75eff4e0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateThread, address_out = 0x75ea46b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = ExitThread, address_out = 0x77c16390 |
|
1 | |
| Get Address | c:\windows\syswow64\user32.dll | function = MessageBoxA, address_out = 0x74bdd740 |
|
1 | |
| Get Address | c:\windows\syswow64\user32.dll | function = GetUserObjectInformationW, address_out = 0x74ba36d0 |
|
1 | |
| Get Address | c:\windows\syswow64\user32.dll | function = GetProcessWindowStation, address_out = 0x74ba3600 |
|
1 | |
| Get Address | c:\windows\syswow64\user32.dll | function = ShowWindow, address_out = 0x74ba3ee0 |
|
1 | |
| Get Address | c:\windows\syswow64\user32.dll | function = FindWindowA, address_out = 0x74b87a80 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptHashData, address_out = 0x761ceef0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptCreateHash, address_out = 0x761ceed0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptEncrypt, address_out = 0x761e2cf0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptImportKey, address_out = 0x761cf6a0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptGetHashParam, address_out = 0x761cee70 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptDestroyKey, address_out = 0x761cfa60 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptReleaseContext, address_out = 0x761cfbc0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptAcquireContextA, address_out = 0x761cfc40 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = ReportEventA, address_out = 0x761f66d0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = RegisterEventSourceA, address_out = 0x761d10d0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = DeregisterEventSource, address_out = 0x761c1a40 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CloseEventLog, address_out = 0x761d27c0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = ClearEventLogA, address_out = 0x761f60e0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = OpenEventLogA, address_out = 0x761f65b0 |
|
1 | |
| Get Address | c:\windows\syswow64\advapi32.dll | function = CryptDestroyHash, address_out = 0x761cf0e0 |
|
1 | |
| Get Address | c:\windows\syswow64\shell32.dll | function = ShellExecuteA, address_out = 0x76683ef0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 23, address_out = 0x746b4510 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 15, address_out = 0x746b8ff0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 9, address_out = 0x746b8ff0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 7, address_out = 0x746b3b30 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 6, address_out = 0x746b3750 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 5, address_out = 0x746b43d0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 4, address_out = 0x746a5410 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 3, address_out = 0x746b0910 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 2, address_out = 0x746b1cc0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 19, address_out = 0x746a5030 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 16, address_out = 0x746b0c50 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 112, address_out = 0x746b9b40 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 18, address_out = 0x746a4ea0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 151, address_out = 0x746b8fa0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 111, address_out = 0x746b8fe0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 116, address_out = 0x746b7170 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 115, address_out = 0x746a5b40 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = WSAIoctl, address_out = 0x746ae800 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = getaddrinfo, address_out = 0x746a5810 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = freeaddrinfo, address_out = 0x746a4fa0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 17, address_out = 0x746ba8b0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 20, address_out = 0x746a5a20 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 1, address_out = 0x746de430 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 13, address_out = 0x746a4be0 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 10, address_out = 0x746afa10 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 57, address_out = 0x746d6e60 |
|
1 | |
| Get Address | c:\windows\syswow64\ws2_32.dll | function = 21, address_out = 0x746afd70 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 41, address_out = 0x74d4db40 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 50, address_out = 0x74d7f420 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 22, address_out = 0x74d84790 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 211, address_out = 0x74d71bb0 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 46, address_out = 0x74d83a60 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 143, address_out = 0x74d777c0 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 27, address_out = 0x74d7ed70 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 32, address_out = 0x74d68860 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 33, address_out = 0x74d689a0 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 35, address_out = 0x74d4e240 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 79, address_out = 0x74d55e80 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 30, address_out = 0x74d7e8e0 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 301, address_out = 0x74d745e0 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 200, address_out = 0x74d84810 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 60, address_out = 0x74d6b230 |
|
1 | |
| Get Address | c:\windows\syswow64\wldap32.dll | function = 26, address_out = 0x74d53550 |
|
1 | |
| Get Address | c:\windows\syswow64\kernelbase.dll | function = InitializeCriticalSectionEx, address_out = 0x74f97060 |
|
2 | |
| Get Address | c:\windows\syswow64\kernelbase.dll | function = FlsAlloc, address_out = 0x74f9bea0 |
|
2 | |
| Get Address | c:\windows\syswow64\kernelbase.dll | function = FlsSetValue, address_out = 0x74f92550 |
|
2 | |
| Get Address | c:\windows\syswow64\kernelbase.dll | function = FlsGetValue, address_out = 0x74f870c0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernelbase.dll | function = LCMapStringEx, address_out = 0x74f7ed00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FlsAlloc, address_out = 0x75ea4ae0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FlsFree, address_out = 0x75ea4b00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FlsGetValue, address_out = 0x75ea4b20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FlsSetValue, address_out = 0x75ea4b40 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = InitializeCriticalSectionEx, address_out = 0x75efebc0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = InitOnceExecuteOnce, address_out = 0x74f95550 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateEventExW, address_out = 0x75efeb20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateSemaphoreW, address_out = 0x75efeb90 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateSemaphoreExW, address_out = 0x75efeb80 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateThreadpoolTimer, address_out = 0x75ea6d30 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetThreadpoolTimer, address_out = 0x77bfd7c0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WaitForThreadpoolTimerCallbacks, address_out = 0x77bfb840 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CloseThreadpoolTimer, address_out = 0x77bfb740 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateThreadpoolWait, address_out = 0x75ea6d70 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetThreadpoolWait, address_out = 0x77bfc0b0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CloseThreadpoolWait, address_out = 0x77bfbe10 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FlushProcessWriteBuffers, address_out = 0x77c22b20 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = FreeLibraryWhenCallbackReturns, address_out = 0x77c18e50 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCurrentProcessorNumber, address_out = 0x77c152f0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateSymbolicLinkW, address_out = 0x75ea4510 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetCurrentPackageId, address_out = 0x74f9e260 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetTickCount64, address_out = 0x75ea0db0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetFileInformationByHandleEx, address_out = 0x75ea43d0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetFileInformationByHandle, address_out = 0x75eff110 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetSystemTimePreciseAsFileTime, address_out = 0x75eff1e0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = InitializeConditionVariable, address_out = 0x77c13a00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WakeConditionVariable, address_out = 0x77c88c50 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = WakeAllConditionVariable, address_out = 0x77c18a90 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SleepConditionVariableCS, address_out = 0x7500fca0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = InitializeSRWLock, address_out = 0x77c13a00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = AcquireSRWLockExclusive, address_out = 0x77bf58e0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = TryAcquireSRWLockExclusive, address_out = 0x77c72ce0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = ReleaseSRWLockExclusive, address_out = 0x77bf83a0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SleepConditionVariableSRW, address_out = 0x7500fcf0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CreateThreadpoolWork, address_out = 0x75ea6db0 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SubmitThreadpoolWork, address_out = 0x77bfeb00 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CloseThreadpoolWork, address_out = 0x77bfed50 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CompareStringEx, address_out = 0x75ea7050 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = GetLocaleInfoEx, address_out = 0x75ea7190 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = LCMapStringEx, address_out = 0x75ea7480 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = AreFileApisANSI, address_out = 0x75ea4280 |
|
1 | |
| Get Address | c:\windows\syswow64\kernelbase.dll | function = GetSystemTimePreciseAsFileTime, address_out = 0x74f6b830 |
|
1 |
Window (1)
| Operation | Window Name | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Find | - | class_name = ConsoleWindowClass |
|
1 |
System (5)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Time | type = System Time, time = 2019-06-02 15:34:19 (UTC) |
|
1 | |
| Get Time | type = Performance Ctr, time = 14329530777 |
|
1 | |
| Get Time | type = System Time |
|
3 |
Mutex (1)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Create | mutex_name = EC89625D-9516-4892-B681-9CA5BB4538C1 |
|
1 |
Environment (1)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Environment String | - |
|
1 |
Process #3: cmd.exe
107
0
| Information | Value |
|---|---|
| ID | #3 |
| File Name | c:\windows\syswow64\cmd.exe |
| Command Line | C:\WINDOWS\system32\cmd.exe /c tAskkill /F /IM mysqld.exe&tAskkill /F /IM httpd.exe&tAskkill /F /IM sqlservr.exe&tAskkill /F /IM sqlwriter.exe&tAskkill /F /IM w3wp.exe &tAskkill /F /IM sqlagent.exe&tAskkill /F /IM oracle.exe&tAskkill /F /IM emagent.exe&tAskkill /F /IM mysqld-nt.exe |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:00:52, Reason: Child Process |
| Unmonitor | End Time: 00:01:09, Reason: Self Terminated |
| Monitor Duration | 00:00:17 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xd44 |
| Parent PID | 0x7b8 (c:\users\fd1hvy\desktop\sxidlt.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
D2C
0x
7A4
|
Host Behavior
File (24)
| Operation | Filename | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Info | C:\Users\FD1HVy\Desktop | type = file_attributes |
|
2 | |
| Open | STD_OUTPUT_HANDLE | - |
|
12 | |
| Open | STD_INPUT_HANDLE | - |
|
10 |
Registry (17)
| Operation | Key | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Open Key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System | - |
|
1 | |
| Open Key | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | - |
|
1 | |
| Open Key | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | - |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 152, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = AutoRun, data = 9, type = REG_NONE |
|
1 |
Process (5)
| Operation | Process | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | C:\WINDOWS\system32\taskkill.exe | os_pid = 0xb6c, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Create | C:\WINDOWS\system32\taskkill.exe | os_pid = 0xe88, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Create | C:\WINDOWS\system32\taskkill.exe | os_pid = 0xce8, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Create | C:\WINDOWS\system32\taskkill.exe | os_pid = 0xa6c, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Create | C:\WINDOWS\system32\taskkill.exe | os_pid = 0xfc8, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 |
Module (8)
| Operation | Module | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Handle | c:\windows\syswow64\cmd.exe | base_address = 0x100000 |
|
1 | |
| Get Handle | c:\windows\syswow64\kernel32.dll | base_address = 0x75e90000 |
|
2 | |
| Get Filename | - | process_name = c:\windows\syswow64\cmd.exe, file_name_orig = C:\WINDOWS\SysWOW64\cmd.exe, size = 32743 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetThreadUILanguage, address_out = 0x75ea4f70 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CopyFileExW, address_out = 0x75ea4330 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = IsDebuggerPresent, address_out = 0x75ea5930 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetConsoleInputExeNameW, address_out = 0x74fe09d0 |
|
1 |
Environment (51)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Environment String | - |
|
19 | |
| Get Environment String | name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps |
|
6 | |
| Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
6 | |
| Get Environment String | name = PROMPT |
|
1 | |
| Get Environment String | name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe |
|
1 | |
| Get Environment String | name = KEYS |
|
1 | |
| Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Set Environment String | name = =C:, value = C:\Users\FD1HVy\Desktop |
|
1 | |
| Set Environment String | name = COPYCMD |
|
5 | |
| Set Environment String | name = =ExitCode, value = 00000080 |
|
5 | |
| Set Environment String | name = =ExitCodeAscii |
|
5 |
Process #4: taskkill.exe
0
0
| Information | Value |
|---|---|
| ID | #4 |
| File Name | c:\windows\syswow64\taskkill.exe |
| Command Line | tAskkill /F /IM mysqld.exe |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:00:53, Reason: Child Process |
| Unmonitor | End Time: 00:00:59, Reason: Self Terminated |
| Monitor Duration | 00:00:05 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xb6c |
| Parent PID | 0xd44 (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
DDC
0x
DA8
0x
CFC
0x
C04
0x
E38
|
Process #6: taskkill.exe
0
0
| Information | Value |
|---|---|
| ID | #6 |
| File Name | c:\windows\syswow64\taskkill.exe |
| Command Line | tAskkill /F /IM httpd.exe |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:00:58, Reason: Child Process |
| Unmonitor | End Time: 00:01:01, Reason: Self Terminated |
| Monitor Duration | 00:00:02 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xe88 |
| Parent PID | 0xd44 (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
DF0
0x
F0C
0x
42C
0x
2AC
0x
DB4
|
Process #7: taskkill.exe
0
0
| Information | Value |
|---|---|
| ID | #7 |
| File Name | c:\windows\syswow64\taskkill.exe |
| Command Line | tAskkill /F /IM sqlservr.exe |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:00, Reason: Child Process |
| Unmonitor | End Time: 00:01:03, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xce8 |
| Parent PID | 0xd44 (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
36C
0x
86C
0x
F8C
0x
D80
0x
3A8
|
Process #8: taskkill.exe
0
0
| Information | Value |
|---|---|
| ID | #8 |
| File Name | c:\windows\syswow64\taskkill.exe |
| Command Line | tAskkill /F /IM sqlwriter.exe |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:03, Reason: Child Process |
| Unmonitor | End Time: 00:01:07, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xa6c |
| Parent PID | 0xd44 (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
744
0x
A90
0x
754
0x
D7C
0x
7B4
|
Process #9: taskkill.exe
0
0
| Information | Value |
|---|---|
| ID | #9 |
| File Name | c:\windows\syswow64\taskkill.exe |
| Command Line | tAskkill /F /IM w3wp.exe |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:06, Reason: Child Process |
| Unmonitor | End Time: 00:01:09, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xfc8 |
| Parent PID | 0xd44 (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
714
0x
9E8
0x
A84
0x
E9C
0x
D14
|
Process #10: cmd.exe
55
0
| Information | Value |
|---|---|
| ID | #10 |
| File Name | c:\windows\syswow64\cmd.exe |
| Command Line | C:\WINDOWS\system32\cmd.exe /c md C:\ProgramData |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:08, Reason: Child Process |
| Unmonitor | End Time: 00:01:10, Reason: Self Terminated |
| Monitor Duration | 00:00:01 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xd04 |
| Parent PID | 0x7b8 (c:\users\fd1hvy\desktop\sxidlt.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
D60
0x
E60
|
Host Behavior
File (17)
| Operation | Filename | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create Directory | C:\ProgramData | - |
|
1 | |
| Get Info | C:\Users\FD1HVy\Desktop | type = file_attributes |
|
2 | |
| Get Info | STD_ERROR_HANDLE | type = file_type |
|
1 | |
| Open | STD_OUTPUT_HANDLE | - |
|
6 | |
| Open | STD_INPUT_HANDLE | - |
|
3 | |
| Open | STD_ERROR_HANDLE | - |
|
3 | |
| Write | STD_ERROR_HANDLE | size = 55 |
|
1 |
Registry (17)
| Operation | Key | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Open Key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System | - |
|
1 | |
| Open Key | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | - |
|
1 | |
| Open Key | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | - |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 208, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = AutoRun, data = 9, type = REG_NONE |
|
1 |
Module (8)
| Operation | Module | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Handle | c:\windows\syswow64\cmd.exe | base_address = 0x100000 |
|
1 | |
| Get Handle | c:\windows\syswow64\kernel32.dll | base_address = 0x75e90000 |
|
2 | |
| Get Filename | - | process_name = c:\windows\syswow64\cmd.exe, file_name_orig = C:\WINDOWS\SysWOW64\cmd.exe, size = 32743 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetThreadUILanguage, address_out = 0x75ea4f70 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CopyFileExW, address_out = 0x75ea4330 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = IsDebuggerPresent, address_out = 0x75ea5930 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetConsoleInputExeNameW, address_out = 0x74fe09d0 |
|
1 |
Environment (11)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Environment String | - |
|
4 | |
| Get Environment String | name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps |
|
1 | |
| Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Get Environment String | name = PROMPT |
|
1 | |
| Get Environment String | name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe |
|
1 | |
| Get Environment String | name = KEYS |
|
1 | |
| Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Set Environment String | name = =C:, value = C:\Users\FD1HVy\Desktop |
|
1 |
Process #11: cmd.exe
71
0
| Information | Value |
|---|---|
| ID | #11 |
| File Name | c:\windows\syswow64\cmd.exe |
| Command Line | C:\WINDOWS\system32\cmd.exe /c vssadmin delete shadows /all /quiet&vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:09, Reason: Child Process |
| Unmonitor | End Time: 00:01:13, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xedc |
| Parent PID | 0x7b8 (c:\users\fd1hvy\desktop\sxidlt.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
540
0x
D84
|
Host Behavior
File (15)
| Operation | Filename | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Info | C:\Users\FD1HVy\Desktop | type = file_attributes |
|
2 | |
| Open | STD_OUTPUT_HANDLE | - |
|
8 | |
| Open | STD_INPUT_HANDLE | - |
|
5 |
Registry (17)
| Operation | Key | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Open Key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System | - |
|
1 | |
| Open Key | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | - |
|
1 | |
| Open Key | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | - |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 197, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = AutoRun, data = 9, type = REG_NONE |
|
1 |
Process (2)
| Operation | Process | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | C:\WINDOWS\system32\vssadmin.exe | os_pid = 0xd90, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Create | C:\WINDOWS\system32\vssadmin.exe | os_pid = 0xda8, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 |
Module (8)
| Operation | Module | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Handle | c:\windows\syswow64\cmd.exe | base_address = 0x100000 |
|
1 | |
| Get Handle | c:\windows\syswow64\kernel32.dll | base_address = 0x75e90000 |
|
2 | |
| Get Filename | - | process_name = c:\windows\syswow64\cmd.exe, file_name_orig = C:\WINDOWS\SysWOW64\cmd.exe, size = 32743 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetThreadUILanguage, address_out = 0x75ea4f70 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = CopyFileExW, address_out = 0x75ea4330 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = IsDebuggerPresent, address_out = 0x75ea5930 |
|
1 | |
| Get Address | c:\windows\syswow64\kernel32.dll | function = SetConsoleInputExeNameW, address_out = 0x74fe09d0 |
|
1 |
Environment (27)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Environment String | - |
|
10 | |
| Get Environment String | name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps |
|
3 | |
| Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
3 | |
| Get Environment String | name = PROMPT |
|
1 | |
| Get Environment String | name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe |
|
1 | |
| Get Environment String | name = KEYS |
|
1 | |
| Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Set Environment String | name = =C:, value = C:\Users\FD1HVy\Desktop |
|
1 | |
| Set Environment String | name = COPYCMD |
|
2 | |
| Set Environment String | name = =ExitCode, value = 00000002 |
|
2 | |
| Set Environment String | name = =ExitCodeAscii |
|
2 |
Process #12: vssadmin.exe
0
0
| Information | Value |
|---|---|
| ID | #12 |
| File Name | c:\windows\syswow64\vssadmin.exe |
| Command Line | vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:10, Reason: Child Process |
| Unmonitor | End Time: 00:01:11, Reason: Self Terminated |
| Monitor Duration | 00:00:01 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xd90 |
| Parent PID | 0xedc (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
8AC
0x
E38
0x
C04
0x
DDC
0x
CFC
|
Process #13: vssadmin.exe
0
0
| Information | Value |
|---|---|
| ID | #13 |
| File Name | c:\windows\syswow64\vssadmin.exe |
| Command Line | vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:11, Reason: Child Process |
| Unmonitor | End Time: 00:01:12, Reason: Self Terminated |
| Monitor Duration | 00:00:01 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xda8 |
| Parent PID | 0xedc (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
D40
0x
A88
0x
470
0x
FB4
0x
B6C
|
Process #14: cmd.exe
71
0
| Information | Value |
|---|---|
| ID | #14 |
| File Name | c:\windows\system32\cmd.exe |
| Command Line | C:\WINDOWS\system32\cmd.exe /c vssadmin delete shadows /all /quiet&vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:12, Reason: Child Process |
| Unmonitor | End Time: 00:01:20, Reason: Self Terminated |
| Monitor Duration | 00:00:08 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x2ac |
| Parent PID | 0x7b8 (c:\users\fd1hvy\desktop\sxidlt.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
DF0
0x
42C
|
Host Behavior
File (15)
| Operation | Filename | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Info | C:\Users\FD1HVy\Desktop | type = file_attributes |
|
2 | |
| Open | STD_OUTPUT_HANDLE | - |
|
8 | |
| Open | STD_INPUT_HANDLE | - |
|
5 |
Registry (17)
| Operation | Key | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Open Key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System | - |
|
1 | |
| Open Key | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | - |
|
1 | |
| Open Key | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | - |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 4, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor | value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Read Value | HKEY_CURRENT_USER\Software\Microsoft\Command Processor | value_name = AutoRun, data = 9, type = REG_NONE |
|
1 |
Process (2)
| Operation | Process | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | C:\WINDOWS\system32\vssadmin.exe | os_pid = 0xf1c, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Create | C:\WINDOWS\system32\vssadmin.exe | os_pid = 0x60, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 |
Module (8)
| Operation | Module | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Handle | c:\windows\system32\cmd.exe | base_address = 0x7ff6bdaf0000 |
|
1 | |
| Get Handle | c:\windows\system32\kernel32.dll | base_address = 0x7ff92fdd0000 |
|
2 | |
| Get Filename | - | process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\WINDOWS\system32\cmd.exe, size = 32743 |
|
1 | |
| Get Address | c:\windows\system32\kernel32.dll | function = SetThreadUILanguage, address_out = 0x7ff92fdea990 |
|
1 | |
| Get Address | c:\windows\system32\kernel32.dll | function = CopyFileExW, address_out = 0x7ff92fdee830 |
|
1 | |
| Get Address | c:\windows\system32\kernel32.dll | function = IsDebuggerPresent, address_out = 0x7ff92fdee300 |
|
1 | |
| Get Address | c:\windows\system32\kernel32.dll | function = SetConsoleInputExeNameW, address_out = 0x7ff92f1b0a40 |
|
1 |
Environment (27)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Environment String | - |
|
10 | |
| Get Environment String | name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps |
|
3 | |
| Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
3 | |
| Get Environment String | name = PROMPT |
|
1 | |
| Get Environment String | name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe |
|
1 | |
| Get Environment String | name = KEYS |
|
1 | |
| Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Set Environment String | name = =C:, value = C:\Users\FD1HVy\Desktop |
|
1 | |
| Set Environment String | name = COPYCMD |
|
2 | |
| Set Environment String | name = =ExitCode, value = 00000002 |
|
2 | |
| Set Environment String | name = =ExitCodeAscii |
|
2 |
Process #15: vssadmin.exe
0
0
| Information | Value |
|---|---|
| ID | #15 |
| File Name | c:\windows\system32\vssadmin.exe |
| Command Line | vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:13, Reason: Child Process |
| Unmonitor | End Time: 00:01:16, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xf1c |
| Parent PID | 0x2ac (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
7B4
0x
D7C
0x
754
0x
A90
0x
C14
|
Process #17: vssadmin.exe
0
0
| Information | Value |
|---|---|
| ID | #17 |
| File Name | c:\windows\system32\vssadmin.exe |
| Command Line | vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:01:15, Reason: Child Process |
| Unmonitor | End Time: 00:01:19, Reason: Self Terminated |
| Monitor Duration | 00:00:04 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x60 |
| Parent PID | 0x2ac (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
4A4
0x
D14
0x
A84
0x
7A4
0x
D2C
|
